2021

An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Securi

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was

An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user t

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a sto

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller serve

A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3

Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process

Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/trave

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tl

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface vi

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS) vulnerability in entr

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vu

Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote a

eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL

eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.

Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data expos

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus p

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be r

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely ex

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged

curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Acto

A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image

An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers ca

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can

A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit th

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contai

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike

An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UP

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is process

An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/p

BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies).

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versio

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versio

Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepa

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted website

A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0

CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker wit