2021

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write du

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows r

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to

The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing m

An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows a

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privileg

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Con

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous u

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL q

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software r

In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potential

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storag

Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to interce

A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arb

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel pa

Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to devic

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of servi

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically prox

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which co

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which co

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allo

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given

Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, give

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted

Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows u

Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows

Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted app

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance informati

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts informat

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance informati

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `cop

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read v

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read v

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read v

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra