2021

A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions m

The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTM

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstra

Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute maliciou

Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker

Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javasc

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getC

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number o

An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations,

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver la

In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the Fet

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management

A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platfo

A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s):

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to

Zoho ManageEngine ADManager Plus before 7066 allows XSS.

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated att

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to co

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver

A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Plat

A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Plat

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all v

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicou

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describi

Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movabl

Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7

Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Typ

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corrup

An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions

An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of unin

An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free

An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a

An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at becaus

An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized m

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read th

An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterato