2021

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attack

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webr

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA ima

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA ima

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentiall

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connecti

PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the a

Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple par

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affec

Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. ano

When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNM

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in t

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&r

wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order

In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic

An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (wit

The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB

Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input whe

There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vuln

There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, r

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform speci

There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerabi

There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain soft

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versi

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input

There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protect

There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have t

There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the module

Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker c

A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submit

Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which c

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all version

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb sh

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts.

NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbi

In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possi

In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of se

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permissi

Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remo