2021

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access r

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An i

A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges

Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted scri

Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over cleartext HTTP, which allo

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 1

Craft CMS before 3.6.13 has an XSS vulnerability.

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can retrieve recently used and running applicat

An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the proc

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a runnin

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TL

IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive

SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the `filesystem.

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing

LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm.

LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm.

Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to delive

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authentic

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inj

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated a

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Aut

Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon In

Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapd

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, S

Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer l

Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid

Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify i

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javasc

The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to rea

A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissa

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authentic

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user.

Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Java

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile applic

Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-co

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver m

Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/setting

ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error a

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_t

In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibi

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure o

Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and oth

Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository bra

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check cou