2021

SafeCurl before 0.9.2 has a DNS rebinding vulnerability.

Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/up

Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the

Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.ph

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in th

A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128

An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to c

A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of se

An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows att

WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.

WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.

In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.

Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.

Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code

MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can u

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_s

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle

Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a math

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which a

A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remo

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System P

A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System

In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing a

In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an u

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing

An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't

The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loo

An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connectio

An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP p

An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP

An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query'

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parse

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parse

An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below

A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via s

A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firep

A vulnerability in the AppDynamics .NET Agent for Windows could allow an attacker to leverage an authenticated, local us

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series

A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat

A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication