2021

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX ev

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user control

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lea

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods

There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a contai

There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containe

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protoc

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote u

Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromis

A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauth

A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauth

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from maliciou

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remot

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerabili

There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulner

There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability ca

There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability m

Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is ba

There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap

An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allo

UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands

Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5),

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5),

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the b

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk

REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses t

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could al

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This

In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoot

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling o

A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code exec

EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the passwo

Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attacker

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised t

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a use

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform