2021

In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configu

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPK

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. A

IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous f

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which

IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacke

IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user.

IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-For

IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further atta

IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validat

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characte

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users o

Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticate

IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery

Division-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and function vips_mask_point

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c

DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678.

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder per

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.

MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the sy

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Perso

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub

A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be af

Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Windows Remote Assistance Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows Partition Management Driver Elevation of Privilege Vulnerability

Win32k Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Authenticode Spoofing Vulnerability

Windows Installer Spoofing Vulnerability

Windows Key Distribution Center Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Bing Search Spoofing Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows Secure Kernel Mode Security Feature Bypass Vulnerability

Windows InstallService Elevation of Privilege Vulnerability

Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.