2021

Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) vi

FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress funct

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. Thi

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirs

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the

Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vu

Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitiv

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the pat

SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumsta

GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can l

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to acco

The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontr

The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read gl

The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps duri

In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to

In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deput

In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and kee

In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due t

In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to loc

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of

The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to

The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack

A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then con

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consum

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited mem

The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specifi

The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited,

Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a

The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found

Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability.

An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when c

qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service

The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free B

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a loca

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow