2021

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer derefer

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged esca

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious acto

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vul

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the we

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet f

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to us

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and clea

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has imprope

vim is vulnerable to Heap-based Buffer Overflow

SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project mo

Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow f

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholm

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remo

Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Server_jack_init function. which allows attackers to cond

Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows atta

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is.

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in t

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in t

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in t

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in t

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could ex

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. Th

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to

SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and p

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text for

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the pass

A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a deni

A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unau

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operati

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a ma

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration informat

In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to

vault-cli is a configurable command-line interface tool (and python library) to interact with Hashicorp Vault. In versio

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions

A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to

JFinal_cms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service.