2021

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote in

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotel

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5

In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of

In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escala

In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalatio

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of pri

In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation

In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi

In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of pri

In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of ser

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process run

ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-com

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17,

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core

Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adja

A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary f

Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privilege

In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path.

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path v

A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13

HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties v

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users.

Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google

Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote ho

This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments

The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker i

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access

loklak is an open-source server application which is able to collect messages from various sources, including twitter. T

In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the fi

An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated a

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send

The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of A