2021

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RES

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send mal

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts ex

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s c

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashi

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially inc

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially inc

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.

Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplif

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was fou

In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquot

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in o

In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s passwor

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonat

A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions

Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resour

In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git command

In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to tr

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import

In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project

Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via m

A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in depend

Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML stat

In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, pass

The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not

A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that

Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visib

Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.or

Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uplo

Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arb

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by usin

A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enable

The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting th

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET paramete

The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back i

The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing