2021

MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called fr

MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called fr

vim is vulnerable to Use After Free

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture fi

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injectio

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the

Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls. When the software

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By defaul

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the devi

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The inst

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin end

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the de

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmw

It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative comma

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the d

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vuln

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can a

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

mruby is vulnerable to NULL Pointer Dereference

Microsoft SharePoint Elevation of Privilege Vulnerability

vim is vulnerable to Use After Free

An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific upd

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dum

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, t

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote a

Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input

Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire anoth

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attac

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing projec

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files

A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that ma

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Sch

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attack

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an at

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function.

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has

An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has li

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impers