2021

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected

vim is vulnerable to Out-of-bounds Read

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.

In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkH

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The u

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, G

Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earli

Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular ex

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cach

A memory leak vulnerability was found in Privoxy when handling errors.

A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory whe

A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously

A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendm

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use th

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Sec

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iClou

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implement

An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 1

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1,

A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. A

In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earli

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research a

NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply indi

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injectio

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks.

e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mod

TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessi