2021

Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads fir

Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-writte

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginIntercep

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in thro

A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.

An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the curr

IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requi

Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon A

Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array witho

Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Aut

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto,

An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdrag

Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in

Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Au

Possible integer overflow can occur when stream info update is called when total number of streams detected are zero whi

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in

Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses pa

Out of bound memory access during music playback with modified content due to copying data without checking destination

Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Aut

Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory res

Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of boun

Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtua

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthent

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks aga

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks aga

A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The suppor

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Support

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Support

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The suppor

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Supported

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versio

The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to

The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the p

Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, cou

Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature,

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (d

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execu

OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occ