2021

A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and belo

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager a

EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the

Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in pro

Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'lo

Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, compani

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application.

Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the

Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the

read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a deni

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-201

An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overfl

The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dere

In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bo

An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1

An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and

Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before

An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 throug

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acce

The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (N

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remot

Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prio

Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prio

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenti

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV3

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV3

A vulnerability in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W V

A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injecti

A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the

A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, rem

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.