2021

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a cra

The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL po

The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer derefe

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a craft

Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fi

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image file

matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media

Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text

The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated us

Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud

Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that coul

XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versio

This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of t

jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4

jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4

jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 t

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling

jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorith

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An aut

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An aut

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking d

Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect

A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, t

Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes passwo

Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library m

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, whi

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some param

A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0

Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handli

Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background witho

Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remot

SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers t

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerabil

Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by

In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to lo

SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote atta

Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allow

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students >

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a loc

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Febru

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows re

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows re

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature re

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (prev