2021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_req

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute

An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOT

A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allow

ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due t

In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings

In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent.

In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to rem

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default

In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that

In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defaul

In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This coul

In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bo

In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resul

In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bind

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead

In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.

In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a t

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local es

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local es

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause th

In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the d

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fau

An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the paramet

An integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx' and 'lastPeriodExecId

Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP

A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated priv

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevate

A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Upd

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update

Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior

Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scrip

The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an a

Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the s

In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /m

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an o

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can pe