2021

A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protecti

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an au

Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NC

A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more inf

IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent p

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, cause

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This

Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensit

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETG

An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated at

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possib

The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content

CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administ

This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary fil

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Admini

A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack usi

In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.

In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.

In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user.

JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly.

In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution.

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.

In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.

In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.

In JetBrains Hub before 2020.1.12629, an open redirect was possible.

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.

SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker wa

SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.

SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permiss

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of

In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escala

In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalatio

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of pri

In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio