2021

A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA)

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Fi

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (F

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwri

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local

Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower T

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcateg

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the

An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0.

A Stored Cross Site Scripting (XSS) vunerability exists in Sourcecodeste Vehicle Parking Management System affected vers

An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username i

IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session e

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attac

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Fo

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configuratio

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set t

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowi

An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the applicati

In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration

In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and

An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complai

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by at

In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind o

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high pri

There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses ex

There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a mo

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the si

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special char

There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this

The Secure flag is not set in the SSL Cookie of Kiwi Syslog Server 9.7.2 and previous versions. The Secure attribute tel

The ASP.NET debug feature is enabled by default in Kiwi Syslog Server 9.7.2 and previous versions. ASP.NET allows remote

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diag

WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unautho

The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upl

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing inform

Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to m

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivilege

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and e