CVE Records

Google Chrome Use-After-Free Vulnerability

Google Chromium V8 Incorrect Implementation Vulnerabililty

Apache Flink directory traversal attack: reading remote files through the REST API

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

CyberoamOS (CROS) SQL Injection Vulnerability

Apache Struts Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products Memory Initialization Vulnerability

Apple Multiple Products Type Confusion Vulnerability

Multiple VMware Products Command Injection Vulnerability

Drupal core Un-restricted Upload of File

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Windows Kernel Local Elevation of Privilege Vulnerability

Apache Airflow's Experimental API Authentication Bypass

SaltStack Salt Shell Injection Vulnerability

Google Chrome for Android UI Heap Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Oracle WebLogic Server Remote Code Execution Vulnerability

QNAP NAS File Station Cross-Site Scripting Vulnerability

QNAP NAS File Station Command Injection Vulnerability

QNAP NAS File Station Cross-Site Scripting Vulnerability

Ivanti Pulse Connect Secure Code Execution Vulnerability

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Oracle Business Intelligence Enterprise Edition Path Transversal

VMware ESXi OpenSLP Use-After-Free Vulnerability

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

SonicWall SonicOS Buffer Overflow Vulnerability

Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

Ivanti Pulse Connect Secure Code Execution Vulnerability

Sophos SG UTM Remote Code Execution Vulnerability

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

Microsoft Browser Memory Corruption Vulnerability

WordPress File Manager Plugin Remote Code Execution Vulnerability

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

Trend Micro Multiple Products Improper Access Control Vulnerability

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

Adobe Acrobat Use-After-Free Vulnerability

Netlogon Elevation of Privilege Vulnerability

Windows Spoofing Vulnerability

Scripting Engine Memory Corruption Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Fortinet FortiOS Default Configuration Vulnerability

Fuel CMS SQL Injection Vulnerability

vBulletin PHP Module Remote Code Execution Vulnerability

Pulse Connect Secure Code Injection Vulnerability

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

Apache Airflow Command Injection

Oracle WebLogic Server Remote Code Execution Vulnerability

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

D-Link DIR-610 Devices Remote Command Execution

Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

Sophos XG Firewall Buffer Overflow Vulnerability

PAN-OS: Authentication Bypass in SAML Authentication

Treck TCP/IP stack Out-of-Bounds Read Vulnerability

Microsoft Windows Kernel Privilege Escalation Vulnerability

Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Apple Multiple Products Code Execution Vulnerability

Directory Traversal with spring-cloud-config-server

Pi-Hole AdminLTE Remote Code Execution Vulnerability

Apache Kylin OS Command Injection Vulnerability

Win32k Elevation of Privilege Vulnerability

Plex Media Server Remote Code Execution Vulnerability

IBM Data Risk Manager Directory Traversal Vulnerability

IBM Data Risk Manager Remote Code Execution Vulnerability

IBM Data Risk Manager Security Bypass Vulnerability

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

Roundcube Webmail Remote Code Execution Vulnerability

Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

SaltStack Salt Path Traversal Vulnerability

SaltStack Salt Authentication Bypass Vulnerability

Potential XSS vulnerability in jQuery

Sophos SFOS SQL Injection Vulnerability

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability