2021

Windows App-V Overlay Filter Elevation of Privilege Vulnerability

Microsoft Power BI Information Disclosure Vulnerability

Internet Explorer Memory Corruption Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Windows Event Tracing Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

DirectX Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to em

Windows Update Stack Setup Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthe

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (

Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authe

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property arr

The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This

The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructe

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vu

archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the R

encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewToken

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Task

In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through con

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue

Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 d

The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not p

A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 device

A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the adm

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sendi

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length o

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 device

The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was fo

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constan

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive devic

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero w

In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lea

In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This