2021

A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSli

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap

An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situatio

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that t

Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker

In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This cou

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local

In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could

In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receive

In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala

In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This co

An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline com

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a spec

In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low

Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Ver

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability vi

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability. A low privile

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulner

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulner

Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in

Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerab

Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in ma

An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A

An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A

An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Co

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.ph

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request spl

This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Comma

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticate

OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to bl

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files.

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs'

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comman

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comman

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’

The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service

The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitiv