2021

ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to a

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafte

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploit

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite l

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS

A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated

Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perfor

Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perfor

A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthentica

A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker

October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versio

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a l

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows att

A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung N

A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Not

A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Not

A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 al

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file a

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrar

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitra

An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromis

IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which c

An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw

In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIn

In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead t

In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to u

In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This

In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused d

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video c

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video c

In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacki

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profi

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Region

An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass b

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing da

Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAu

sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Len

Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access

Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that