2021

Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerabili

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The v

Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affec

The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi

The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerab

Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config

The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a spe

Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create

A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attac

Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create

A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An

A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remot

AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buf

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in th

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary com

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could all

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could all

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar o

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unaut

A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabi

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Ma

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communica

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cis

In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can b

In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of th

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox wo

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted C

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inje

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-

Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML v

A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data s

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unsp