2021

The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management

Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to vers

Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execu

A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, th

An issue was discovered on LG mobile devices with Android OS 11 software. They mishandle fingerprint recognition because

ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.

Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed ve

Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tok

EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.

EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password.

Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to in

Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to in

Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write

The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthe

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain co

When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory.

A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have cod

i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attac

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) do

An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipula

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input

Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request contai

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local e

In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local i

In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local infor

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o

In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout syste

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Inject

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via t

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope

There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server

LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixatio

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) o

Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects p

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user in

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the addre