2021

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from v

The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before ver

An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploit

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation

An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate filters on module layout settings could lead to an L

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo paramete

Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page.

Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.

In Deark before v1.5.8, a specially crafted input file can cause a division by zero in (src/fmtutil.c) because of the va

In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (s

A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET request

Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.

Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integratio

SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.30

An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to a

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS).

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and ear

Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting a

Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attac

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a

Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by i

Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecti

Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.a

In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchroniz

In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. f

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent sch

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/rest

A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54,

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that

The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version

Azure DevOps Server Spoofing Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft SharePoint Denial of Service Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Console Driver Denial of Service Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows Console Driver Denial of Service Vulnerability

Windows Installer Information Disclosure Vulnerability