2021

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various ap

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credent

An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (D

An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allow

An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100.

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared l

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input r

Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the d

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered

Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header. NOTE: T

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf

TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation

TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF i

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.r

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for `tf.raw_ops.Sav

Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account

Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and ac

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from ou

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate und

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a re

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a cr

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.r

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.r

TensorFlow is an end-to-end open source platform for machine learning. In affected versions if the arguments to `tf.raw_

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of sparse

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SI

TensorFlow is an end-to-end open source platform for machine learning. The code for `tf.raw_ops.UncompressElement` can b

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determ

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tenso

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for `row_partition_types

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer derefere

File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not veri

Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Ad

Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/