2021

Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to d

Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an ar

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecifi

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server

Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacke

Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authentic

A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may l

A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other pot

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local

A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_

A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges us

A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and E

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program cras

In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password r

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP versi

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any contr

In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they g

UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may ca

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not

Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users wit

A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior t

A specially crafted document can cause the document parser to copy data from a particular record type into a static-size

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an

org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect th

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior t

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio

A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manage

When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to c

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CV

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installat

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior t

Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vul

A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use

A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could caus

fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain

The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path

Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files.

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing a