2021

Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafte

Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fil

Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denia

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, m

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive

The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validat

The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of i

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete co

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, w

The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape

The WP Courses LMS WordPress plugin before 2.0.44 does not sanitise its Video Embed Code, allowing malicious code to be

The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check fo

The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing maliciou

The Book appointment online WordPress plugin before 1.39 does not sanitise or escape Service Prices before outputting it

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenti

The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could a

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the edit_record parameter before

The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputt

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back

The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter

The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authe

The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload an

The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import

The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did n

The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a

The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a co

Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of s

The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via

Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or

Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing