2021

Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a pri

Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.

Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauth

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM)

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Kill

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow a

Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access c

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure,

The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validatio

Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before versio

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of s

An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.

In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (w

In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_uti

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to f

IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of s

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensi

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6

The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which c

The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector se

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which c

The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and meta

The Insert Pages WordPress plugin before 3.7.0 adds a shortcode that prints out other pages' content and custom fields.

The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high pri

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in th

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in t

The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created But

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make

The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets be

The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of its settings

The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which co

The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege u

SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_scrip

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address

Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result

AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of s

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allow

AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local u