2021

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted d

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafte

An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, S

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive informati

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listi

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neu

Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and

Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthentica

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Pol

A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s):

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag

The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL c

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60

In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachmen

In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Ref

In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Obj

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.h

The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a locati

The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in u

An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, r

The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation r

A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive da

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive da

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive da

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive da

An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read

checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the

AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Cha

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An atta

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to imprope

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to imprope

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects