2021

Windows DNS Server Remote Code Execution Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptogra

A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain pr

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain pr

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engi

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Ci

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server

org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect th

Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had c

Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised

Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sa

Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had comprom

An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allo

A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a maliciou

A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Comp

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beaco

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a sta

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header ex

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters

Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, ba

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-f

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrar

OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_sy

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading t

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoseria

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For exam

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle

An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_n

An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain ver

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0

PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.

Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can sen

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain eleva

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. I

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpo

Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed vers