2021

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privil

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From heade

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header (request URI witho

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local

A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could

An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow

Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypt

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow a

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow a

An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker wi

A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local ac

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad s

A command injection vulnerability was reported in the Integrated Management Module (IMM) of legacy IBM System x 3550 M3

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhan

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an

An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras tha

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when t

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.

In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the li

In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may al

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an a

Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This i

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UU

kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure a

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectl

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed

ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56 is affected by a directory traversa

AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnera

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vuln

OpenCV-REST-API master branch as of commit 69be158c05d4dd5a4aff38fdc680a162dd6b9e49 is affected by a directory traversal

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command

Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier implements an agent-to-controller message that doe

Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity

Jenkins pom2config Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attac

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their dele

Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic re

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdr

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapd

Possible use after free due to improper memory validation when initializing new interface via Interface add command in S

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing F