2021

The browser could have been confused into transferring a screen sharing state into another tab, which would leak uninten

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading

The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to c

If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin informatio

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scena

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation

The developer page about:memory has a Measure function for exploring what object types the browser has allocated and the

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to b

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the conten

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure tha

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported

Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps

Microsoft Teams iOS Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Windows DirectX Information Disclosure Vulnerability

Microsoft Dataverse Information Disclosure Vulnerability

Microsoft Edge for Android Information Disclosure Vulnerability

Skype for Business and Lync Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Windows Mobile Device Management Information Disclosure Vulnerability

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability

Windows Trust Verification API Denial of Service Vulnerability

Windows Backup Engine Information Disclosure Vulnerability

Microsoft Windows VMSwitch Information Disclosure Vulnerability

Microsoft Windows VMSwitch Denial of Service Vulnerability

Skype for Business and Lync Spoofing Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

PFX Encryption Security Feature Bypass Vulnerability

<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malic

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability

Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct hos

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server

Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read

Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remot

Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to esc

An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for da

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow a

A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticat

A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric

A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote att

IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR

Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulti

Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (bas