2021

An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series plat

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon

In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of

A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Con

An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interp

A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privile

A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker wit

A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker

A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with aut

A persistent cross-site scripting (XSS) vulnerability in the captive portal graphical user interface of Juniper Networks

An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juni

An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the

An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Ne

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on

The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to v

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malform

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash t

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP

The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response

Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The t

Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affec

python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ng

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability o

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenti

IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service an

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validati

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and

The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sa

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside thi

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline"

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotel

FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made befo

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalin

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPad

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,

This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 202

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local us

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, ma

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Secu

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Secu