2021

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorith

Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to lo

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious

Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate inform

Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or chang

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.

Cloudera Hue 4.6.0 allows XSS via the type parameter.

Cloudera Hue 4.6.0 allows XSS.

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Loc

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticate

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is pr

PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/

PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka

An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier)

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barri

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers compone

An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier)

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, wh

Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries o

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A r

An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is v

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file

An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client o

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that co

Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that prov

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted UR

Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's `saved_model_cli` tool is

TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in Tenso

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a u

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SplitV` can trig

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the `Cudnn

TensorFlow is an open source platform for machine learning. In affected versions the async implementation of `Collective

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for `Trans

TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can b

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionS

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionL