2021

NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to l

Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP acc

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in Ser

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability e

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in enc

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the servic

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet wi

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP fr

In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denia

IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due

IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before and inc

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in mi

ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running B

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerabili

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerabil

Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 private files publicly accessible with Cloud

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using

An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers fo

A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via c

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via craft

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted dj

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu

Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server termina

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite ar

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied file

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbi

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perfor

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection s

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.

When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firef

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed ev

Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corru

A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that w