2021

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restr

Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execu

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/c

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/i

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. Th

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted d

OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via t

There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router

There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under adminis

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a cr

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interfa

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network inte

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite t

DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 201

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation

Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Compo

The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because

MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.

An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.

UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page.

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_m

hestiacp is vulnerable to Use of Wrong Operator in String Comparison

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

libmobi is vulnerable to Out-of-bounds Write

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.

The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFO

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versi

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vu

SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not pe

In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to recei

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send mal

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker cou

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rela

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions wit

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions >= V2.6.3), APOGEE MEC (PPC) (P2 Eth

SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive

The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authe

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous

Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (di

A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect A

An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to a

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files c