2021

A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of ser

A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to valida

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary ac

A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to a

A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a use

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized use

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creat

IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens

LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an

LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-s

A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component u

The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing hi

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set

The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privile

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when g

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings,

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outp

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2

The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in t

The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise,

The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped b

The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sani

The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter wh

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter be

The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before u

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parame

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter