2021

Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a speciall

OX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified By response to show a

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because th

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of t

OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message.

OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app load

OX App Suite 7.10.5 allows XSS via an OX Chat system message.

OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.

OX App Suite 7.10.5 allows XSS via an OX Chat room name.

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandlin

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a deve

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with eleva

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevat

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unau

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption fla

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vu

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exp

We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and la

OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a v

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource fr

Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an at

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp

In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensit

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vu

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_orde

Adobe Audition version 14.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a specially cr

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the us

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any un

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated u

In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific requ

In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when disp

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/trans