2021

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management Sys

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin before 2.1.20 did not

The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stor

The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) v

The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'hotja

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did n

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output b

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX ac

The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege use

The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to th

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows

Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a r

Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed a

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privilege

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privilege

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t

A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Eng

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote att

Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.

Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line

Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content ite

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and ot

Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability.

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Deb

IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters i

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolut

Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The fl

The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in the

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.

The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.

There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation o

There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user s

Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a rem

Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and th