2021

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a ma

An issue was discovered in AbanteCart before 1.3.2. It allows DOM Based XSS.

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 ve

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker c

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.

A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA whi

A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3). When downloading f

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php.

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel

IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checki

IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sens

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.

There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions start

An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.

A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 b

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions start

Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions st

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions start

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 1

In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions start

Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the conf

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unaut

Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenti

Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows una

Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unau

Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unau

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data para

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape

The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.3 does not sanitise and escape the post_id par

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the current_month_divider par

The Caldera Forms WordPress plugin before 1.9.5 does not sanitise and escape the Form Name before outputting it in attri

The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other p