2021

An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend becau

Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3

Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo

Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result i

Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted I

A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vu

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of

An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAj

Azure Sphere Unsigned Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property arr

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vu

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the exe

Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function ca

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to

In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds

xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated strin

An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, result

A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an una

FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could

Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC

Prototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of se

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured

The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.

A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions m

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getC

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to co

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corrup

An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of unin

An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free

An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a

An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at becaus

An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free

An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterato

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write du

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privileg

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Con

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL q

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allo

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `cop