2021

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could resul

Medium by Adobe version 2.4.5.331 (and earlier) is affected by a buffer overflow vulnerability when parsing a crafted fi

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulner

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Com

Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdra

Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivit

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Sn

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapd

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdr

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdra

Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reu

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosur

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packe

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus al

A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.1

A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute

This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without

An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabili

phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php.

BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.

A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user pro

Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resu

Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two F

A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from

A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from

A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens

The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration

An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a re

EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function

Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, t

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limit

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Uplo

Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In affected versio

Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP req

PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConf

A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitra

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveR

Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to t

kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions at

Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce a

messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged att

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack would consist of an authenticate

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to in

Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams inte