2021

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the pass

The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron App

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted serve

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the b

The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metach

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-tran

An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An ev

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free B

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a loca

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a loca

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Secur

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local a

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker t

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote atta

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could al

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL e

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cros

A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker t

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote at

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could al

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbit

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user acc

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin pa

Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could l

Microsoft Surface Pro 3 Security Feature Bypass Vulnerability

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python ob

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed

modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In

IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerab

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use th

ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify th

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP re