2021

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and

Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticat

A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unaut

A vulnerability in the REST API of Cisco Managed Services Accelerator (MSX) could allow an authenticated, remote attacke

Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NC

A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protecti

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an au

Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NC

A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more inf

IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent p

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, cause

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This

Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensit

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETG

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450

This affects all versions of package decal. The vulnerability is in the extend function.

This affects all versions of package decal. The vulnerability is in the set function.

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated at

An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Br

A specially crafted document can cause the document parser to copy data from a particular record type into a static-size

A specially crafted document can cause the document parser to copy data from a particular record type into a static-size

A specially crafted document can cause the document parser to copy data from a particular record type into a static-size

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potenti

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable

A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software Gmb

An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMa

An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a us

An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security pr

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications,

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely pass

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possib

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented i

CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administ

This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary fil

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthoriz