2021

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two c

An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wit

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allo

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: O

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OT

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue

vim is vulnerable to Heap-based Buffer Overflow

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an

mrdoc is vulnerable to Deserialization of Untrusted Data

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook

The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in th

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an

The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, whi

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authenticatio

The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to pe

The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize i

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerabilit

The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting i

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of i

The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET par

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated

An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validate

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validat

An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, es

An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised,

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET paramete

In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of

In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server ma

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that tri

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.

Chromium: CVE-2021-30624 Use after free in Autofill

Chromium: CVE-2021-30623 Use after free in Bookmarks

Chromium: CVE-2021-30622 Use after free in WebApp Installs

Chromium: CVE-2021-30621 UI Spoofing in Autofill

Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

Chromium: CVE-2021-30619 UI Spoofing in Autofill

Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

Chromium: CVE-2021-30617 Policy bypass in Blink

Chromium: CVE-2021-30616 Use after free in Media

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip