2021

Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task

When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to ope

Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed ev

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking re

When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been inte

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and gr

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We p

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with

A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vul

In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum pass

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection

A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execut

A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) tha

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local us

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local us

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, thi

The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A mali

Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulne

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this c

Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML par

Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Secu

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol

pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on a

ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based o

There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500

There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specifi

There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200,

PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsre

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote una

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unaut

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote una

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unaut

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Rem

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote un

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unaut

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remo

Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonec

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/publi

A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create n

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to re

In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. Th