2021

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being p

A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application proce

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowin

In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r1

IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for i

IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calc

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a hea

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an p

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line in

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very li

A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Sec

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD

An issue was discovered in genua genugate before 9.0 Z p19, 9.1.x through 9.6.x before 9.6 p7, and 10.x before 10.1 p4.

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacke

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vuln

ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboar

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scri

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co

Vulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily exploitable vulnerability allows

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authent

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user w

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of

A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker wa

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There i

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improp

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all ve

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file sys

A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerabili

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaus

In bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without authentication and allow SQL