2021

Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.

Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbit

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syste

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syste

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the syste

This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible

This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is p

A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions <

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster ser

IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recep

An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protecti

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specif

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascr

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javasc

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attac

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attac

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that cou

msgpack5 is a msgpack v5 implementation for node.js and the browser. In msgpack5 before versions 3.6.1, 4.5.1, and 5.2.1

Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect author

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom version

The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATIO

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker use

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page vi

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to i

Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary

Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary we

Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary w

CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.

Azure Virtual Machine Information Disclosure Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Windows Admin Center Security Feature Bypass Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

User Profile Service Denial of Service Vulnerability

Windows Media Photo Codec Information Disclosure Vulnerability

Windows ActiveX Installer Service Information Disclosure Vulnerability

Windows Event Tracing Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to em

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients

swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients

archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the R

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto

PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto