2021

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via uns

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifie

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecifie

Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unsp

Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in tu

An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer deref

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory le

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of ser

An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite

Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS.

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.

OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway pri

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or

`projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.jso

ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when usin

A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary

Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."

LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrat

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that

Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attac

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via up

VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_ban

An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection

Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performin

Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.

Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special page

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all th

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explore

Composr 10.0.36 allows XSS in an XML script.

The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing infor

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specif

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific p

The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specif

The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the sp

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entere

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entere

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify th

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string lengt

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered b

The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify th

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by

The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the str