2021

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a h

In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflo

In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Ope

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to cre

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any l

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by

HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same

A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' comma

Apache Dubbo supports various rules to support configuration override or traffic routing (called routing in Dubbo). Thes

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page up

Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-100

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on th

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the in

vim is vulnerable to Heap-based Buffer Overflow

Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an

mrdoc is vulnerable to Deserialization of Untrusted Data

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated

An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validate

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validat

An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, es

An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised,

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET paramete

In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of

In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server ma

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that tri

Chromium: CVE-2021-30624 Use after free in Autofill

Chromium: CVE-2021-30623 Use after free in Bookmarks

Chromium: CVE-2021-30622 Use after free in WebApp Installs

Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

Chromium: CVE-2021-30616 Use after free in Media

Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

Chromium: CVE-2021-30613 Use after free in Base internals

Chromium: CVE-2021-30612 Use after free in WebRTC

Chromium: CVE-2021-30611 Use after free in WebRTC

Chromium: CVE-2021-30610 Use after free in Extensions API

Chromium: CVE-2021-30609 Use after free in Sign-In

Chromium: CVE-2021-30608 Use after free in Web Share

Chromium: CVE-2021-30607 Use after free in Permissions

Chromium: CVE-2021-30606 Use after free in Blink