2021

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra

An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not

An issue was discovered in Joomla! 1.6.0 through 3.9.24. Inadequate filtering of form contents could allow to overwrite

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the cat

An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues.

An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead t

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of gen

When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certa

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.

Courier Management System 1.0 - 'First Name' Stored XSS

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST

Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the

An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS

A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQ

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software rele

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter.

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Mana

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Mana

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Mana

A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform

Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `O

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users exter

An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab we

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libsli

IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a hea

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line in

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vuln

An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow

The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scri

Vulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily exploitable vulnerability allows

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user w

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker wa

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version

Microsoft Exchange Server Remote Code Execution Vulnerability

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There i

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improp

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all ve

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file sys

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaus

A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP table