2021

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a cra

The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V b

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4,

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.1

NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass.

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to suc

git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in cert

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authenticati

A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option t

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite

Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementa

The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath.

A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign

Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL inje

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the w

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vul

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remo

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdrago

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer i

Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Comp

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon

Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC

The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php,

The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote un

Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of s

Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. T

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are s

myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The compone

A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar w

A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access rest

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, bot

A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory

A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption a

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap cons