2021

The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO Active

Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the appli

A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functio

A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.

A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowe

Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary

Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing a

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds wri

An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific

A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gai

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can r

Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is poss

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a vict

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string libr

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel se

Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Red

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RES

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts ex

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashi

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplif

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was fou

In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquot

A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resour

Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visib

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arb

The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery sh

SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.

Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 dur

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vuln

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tri

An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsin

CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing

Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil

Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An auth