2021

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrar

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate p

MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session d

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, con

White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can e

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files fa

SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive informati

SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitiv

RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow atta

RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow atta

RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow atta

RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attac

RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow atta

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerab

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. It is possible to cause an

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, a

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Li

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send inc

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN pa

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5,

An issue was discovered on 4GEE ROUTER HH70VB Version HH70_E1_02.00_22. Attackers can use slowhttptest tool to send inco

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to s

When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obta

This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. Thi

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized change

In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 beca

Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate

An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) res

An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) re

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4)

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resul

An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.

Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resultin

An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022

PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is inje

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Ver

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent

Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an a

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.

Apollos Apps is an open source platform for launching church-related apps. In Apollos Apps versions prior to 2.20.0, new

FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, w

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some pr

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissi