2021

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.

Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).

An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 1

A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system cras

IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below,

Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure t

Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Serve

Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remot

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware inten

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privil

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows AppContainer Elevation Of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows File History Service Elevation of Privilege Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows Font Driver Host Remote Code Execution Vulnerability

Micronaut is a JVM-based, full stack Java framework designed for building JVM applications. A path traversal vulnerabili

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter specia

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration >

chatwoot is vulnerable to Inefficient Regular Expression Complexity

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepo

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A special

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A s

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03.

Discourse is an open-source discussion platform. In Discourse versions 2.7.5 and prior, parsing and rendering of YouTube

sharkdp BAT before 0.18.2 executes less.exe from the current working directory.

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker

An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series swit

A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific seq

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can le

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Par