2021

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware Activ

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows

Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to

Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code exec

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS u

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path.

Possible heap overflow due to improper validation of local variable while storing current task information locally in Sn

Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Sna

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon A

Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, S

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdrago

Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Aut

Possible memory corruption due to improper check when application loader object is explicitly destructed while applicati

Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-pri

A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) fe

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-pri

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to over

A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services

ZStack is open source IaaS(infrastructure as a service) software. In ZStack before versions 3.10.12 and 4.1.6 there is a

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access ri

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the a

LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-App

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request

A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enab

An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enab

A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authentica

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enable

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which

Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained w

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A s

A local user may be able to cause unexpected system termination or read kernel memory. This issue is fixed in macOS Big

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Secur

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6,

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Updat

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security