2021

In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586).

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585).

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585).

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t

Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is

Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it i

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::Confi

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing d

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption duri

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary f

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change in

NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera r

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access control

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, wh

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user

SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in Ser

In SapphireIMS 4097_1, the password in the database is stored in Base64 format.

In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installe

In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives

Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer pro

@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.

An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers t

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administra

IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow a

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the applicatio

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be

Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may al

Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.1

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.

Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated use

Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user t

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyo

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120

Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occ

An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary co

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privile