2021

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records befo

In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site S

In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Sit

In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site

The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general us

Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an erro

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command,

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-

A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no pag

AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result

Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosur

Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure.

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Talk application was vulnerable to a store

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_ss

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allo

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information,

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or s

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 stores user credentials in plain clear text which can be read

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive infor

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service

A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler. An attacker with low

Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosur

Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass.

WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS via the format parameter to the default U

This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie

The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Req

Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thu

ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a g

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

twill is vulnerable to Cross-Site Request Forgery (CSRF)

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, thi

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privil

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local

An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow

Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypt

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow a

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow

An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow a