2021

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform p

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, all

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execu

Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's avai

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of sym

An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the S

Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee p

The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cl

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when renderin

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rend

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when renderi

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists wh

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vul

OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues.

OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occ

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firm

Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Ob

An issue was discovered in Quali CloudShell 9.3. An XSS vulnerability in the login page allows an attacker to craft a UR

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/

Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged ac

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. Th

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lea

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX ev

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a secur

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user control

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lea

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated end

There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a contai

There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containe

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. Thes

Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious re

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticate

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by send

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loo

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be e

A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally auth

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every tim

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker ab

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protoc

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevat

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to