2021

A SQL injection vulnerability exists in the Take Attendance functionality of OS4Ed's OpenSIS 8.0. allows an attacker to

Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload w

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. Th

In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover cred

In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the sys

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code ex

Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensi

Elvish is a programming language and interactive shell, combined into one package. In versions prior to 0.14.0 Elvish's

A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive com

IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate valida

Payara Micro Community 5.2021.6 and below allows Directory Traversal.

DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to

Improper handling of exceptional conditions in SuiteLink server while processing command 0x01

Null pointer dereference in SuiteLink server while processing command 0x0b

Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a

Null pointer dereference in SuiteLink server while processing command 0x07

Null pointer dereference in SuiteLink server while processing commands 0x03/0x10

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained acc

Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqi

The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with netw

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastr

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance manag

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API.

The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to

The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor

The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor wit

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A maliciou

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data org

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family W

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could all

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IO

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote a

A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an u

A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadba

A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Ro

A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to c

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Softwa

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst

A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisc

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authe

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the componen

gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin.

The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malic

LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities un

Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat ac