2021

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename paramet

A memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially craft

Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of

Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a user supplied `X-Forwarded-Host` heade

Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified i

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exis

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circui

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This i

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This i

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset.

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to t

A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could a

Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connecti

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Serv

Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege es

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download.

IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP inject

Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafte

After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbit

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of S

Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unau

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially craf

Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a speciall

Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil

Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil

Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An u

AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a

AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authen

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function,

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by load

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Ga