2021

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows th

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone

An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon

An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-li

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even tho

The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an atta

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an R

A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products c

eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability wh

Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-base

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker ca

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who

Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated atta

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulner

In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This

In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing perm

Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A

In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to

In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead

Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A

In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a

In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This

In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This c

In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This cou

In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This cou

In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to impr

In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null

In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbi

In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitr

In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading

In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connec

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user c

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, with

In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume d

In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could le

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection

In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check.

In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. T

In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service w

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. Thi

In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This c

In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This co

In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a mi

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapj