2021

Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a lo

A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sid

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.

An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-ba

jsuites is an open source collection of common required javascript web components. In affected versions users are subjec

Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause r

http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or re

The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve

Butter is a system usability utility. Due to a kernel error the JPNS kernel is being discontinued. Affected users are re

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Inje

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.

SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads t

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification

Discourse is a platform for community discussion. In affected versions any private message that includes a group had its

ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a comman

Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expre

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfx_alloc() located

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject()

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() locate

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in sw

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function OpAdvance() located

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_DumpActions() lo

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColor

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutput

An issue was discovered in sela through 20200412. file::WavFile::readFromFile() in wav_file.c has a heap-based buffer ov

An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.c has a heap-based buffer

An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.cpp has a heap-based buffe

An issue was discovered in sela through 20200412. rice::RiceDecoder::process() in rice_decoder.cpp has a heap-based buff

An issue was discovered in sela through 20200412. file::WavFile::writeToFile() in wav_file.c has a heap-based buffer ove

An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePag

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow.

An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow

An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow.

An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow.

An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.

An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.

An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow

An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.

An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.

Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attacker

Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attacke