CVE-2021-41558: Undefined Security Weakness

The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...

CVE-2021-40329: Undefined Security Weakness

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management...

CVE-2021-23243: Undefined Security Weakness

In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used...

Security Weakness Resulting in Potential Local Privilege Escalation When HA (High Availability) is Active

A weakness in the SMA100 Series exists when High Availability HA pair is active, potentially permitting an operation at a privilege's level that is higher than the minimum level required. If a malicious actor obtains a 'nobody' user shell on an impacted SMA100 device, this can potentially lead to...

High-Severity RCE Flaw Disclosed in Several Netgear Router Models

Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Traced as CVE-2021-40847 CVSS score: 8.1, the security weakness...

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

CVE-2021-41382: Undefined Security Weakness

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

CVE-2021-41326: Undefined Security Weakness

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shellexec call...

CVE-2021-30690: Undefined Security Weakness

Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache...

CVE-2021-40540: Undefined Security Weakness

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

CVE-2021-40532: Undefined Security Weakness

Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...

CVE-2021-30618: Undefined Security Weakness

Chromium: CVE-2021-30618 Inappropriate implementation in DevTools...

CVE-2021-40147: Undefined Security Weakness

EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...

Booster for WooCommerce < 5.4.4 - Authentication Bypass

Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink function found in the...

CVE-2021-30938: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2021-31009: Undefined Security Weakness

Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5...

CVE-2021-23432: Undefined Security Weakness

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge...

CVE-2021-38531: Undefined Security Weakness

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...

CVE-2021-38586: Undefined Security Weakness

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2020-36472: Undefined Security Weakness

An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander types that they contain...