2021

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial I

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to acce

A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Fa

A vulnerability in the ROM Monitor (ROMMON) of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugge

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execut

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrar

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integr

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arb

A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 pr

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 R

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escal

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticate

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remo

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to acce

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitr

A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could al

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables whi

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbou

An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack t

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demote

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversa

A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.s

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via t

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to

The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bound

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the

In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create

In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an au

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expr

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of r

A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads var

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "