2021

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed th

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 doe

NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original passw

Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple ap

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cr

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cr

The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboa

The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent vi

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a sp

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not

The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in

Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulne

Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerabi

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, rem

A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco Ro

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authe

A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Router

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software coul

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Ap

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sen

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary

A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a st

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allo

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accou

A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) a

A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance (

A vulnerability in Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and all

Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege t

Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.

In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_i

The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page befo

The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outp

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page befo

The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-

The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake,

The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cro

The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scr

The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cros

The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Sit

The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable

The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cros