2021

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker c

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker c

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For mo

Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session t

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path trave

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s c

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via m

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --

The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not

Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.or

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by usin

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the lo

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Or

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API.

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php c

Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd

cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a D

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.

FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.

REINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in the TCServer.jar file.

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrar

ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can

ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers c

ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password at

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GE

ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie pois

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, un

Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that was intended for use when migrating database data with a SQL

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked

Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port n

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled.

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Netwo

Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its a

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/conte

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360.

Nagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.

Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.

Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.