2021

Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto,

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concur

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute

Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Comp

Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Aut

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Sna

Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snap

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapd

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdra

A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon C

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto,

Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in S

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon

Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerabi

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properl

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files

In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a re

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-P

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.202

OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).

OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRP

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, the

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that

An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the P

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link reso

In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 an

LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.

Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code exec

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details sea

A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processin

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a den

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mecha

Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove at

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insuffici

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WA

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Rel