2021

The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered

The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation.

A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort,

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable h

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by Im

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagic

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed

Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 th

Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass n

Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perfo

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who con

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a

Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to lea

Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to lea

Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had

Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain

Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote

Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain p

Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spo

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak

Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker t

Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote atta

Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the

Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain p

Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to l

A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker t

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Imag

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an exter

An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Admi

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow conf

An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, fo

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deser

IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a c

The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the loggi

Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem arti

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attack

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information a

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web ap

A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Leve

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthS