2021

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.

Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an a

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direc

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direc

Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability t

InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could resu

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier),

Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitra

Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arb

Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located impro

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended b

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the

There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root priv

The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi rout

The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.

Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An at

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an

A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote att

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vu

Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in th

A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the

A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authentica

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an

A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility Clie

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an un

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Man

Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticate

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W