2021

FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability

An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.

qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to im

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configur

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS u

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plu

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (version

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, S

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for inp

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdrag

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in

A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with pai

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdrago

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacke

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacke

A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information t

A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, r

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only

systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation be

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.

In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization

An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interf

An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app v

Adobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a special

Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during install

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Au

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows att

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-privileged user may be a

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An applica

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catal

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14

A window management issue was addressed with improved state management. This issue is fixed in iOS 14.6 and iPadOS 14.6.