2021

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly.

The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attack

The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the so

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remot

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which a

Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL.

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.

The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to

The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once()

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulne

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Specia

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution.

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware inten

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination

A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop befo

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevat

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privil

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could

A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker wit

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file

Microsoft SharePoint Server Remote Code Execution Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows AppContainer Elevation Of Privilege Vulnerability

Windows Kernel Remote Code Execution Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows File History Service Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Office Online Server Spoofing Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability