2021

Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to exe

Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a c

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2,

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-A

vim is vulnerable to Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

vim is vulnerable to Use After Free

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any un

In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, imper

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated u

In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific requ

In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authori

In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users,

In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections,

In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to byp

In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when disp

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/trans

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an

A vulnerability in the web application of Cisco Common Services Platform Collector (CSPC) could allow an authenticated,

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authent

GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.

Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Cre

NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of ser

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unp

Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive infor

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the l

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV

Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to discl

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb

Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malform

Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specia

Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of

Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of

Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a

Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handli