2021

A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allow

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary command

The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before vers

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with n

Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without exp

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured.

Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allow

Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote at

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl

An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be ab

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corrup

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exp

Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configu

Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnera

Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remot

Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated

Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability

Insecure Direct Object Reference in edit function of Advanced Forms (Free & Pro) before 1.6.9 allows authenticated remot

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative ac

Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a maliciou

Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources lev

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default ce

There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the ap

There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerability may affect ser

There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect

There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the ap

There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi

There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will caus

There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will

There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful expl

There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the