2021

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, a

In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.

In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.

In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.

In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.

In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.

In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the

Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos t

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could us

SuperMartijn642's Config Lib is a library used by a number of mods for the game Minecraft. The versions of SuperMartijn6

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configura

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers

Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files w

The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function foun

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in

Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3S

An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. T

A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edg

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Wind

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provide

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CU

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known a

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulne

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893. A s

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A s

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A s

Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub,

A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a

A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping

Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.

In certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the MOVEit Transfer web appl

The NewsPlugin WordPress plugin is vulnerable to Cross-Site Request Forgery via the handle_save_style function found in

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking.

Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handl

Acronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation due to insecure folder permissi

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handl

Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bug

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected t

A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library r

A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected s

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was possible to exploit a sto

A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH COD

Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept f