2021

In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite N

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a re

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDe

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in ce

The npm package "striptags" is an implementation of PHP's strip_tags in Typescript. In striptags before version 3.2.0, a

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_r

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same devi

bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava

Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.

It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modifie

curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELN

Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arb

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9

Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency i

Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.

Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authe

IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can b

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vu

In LabCup before <v2_next_18022, it is possible to use the save API to perform unauthorized actions for users without ac

An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console whe

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before us

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable informat

All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10,

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions

IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system.

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, suc

A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /

A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplyin

A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed j

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.