2021

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers to execute arbitrary web

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and in

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site re

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability

IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability all

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could sen

An issue exists within the SSH console of Akkadian Provisioning Manager 4.50.02 which allows a low-level privileged user

An issue exists within Akkadian Provisioning Manager 4.50.02 which allows attackers to view sensitive information within

A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated u

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated user

An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any att

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Contr

An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs.

Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web A

When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may af

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access rest

Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary scr

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from g

Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_pa

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperm

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissio

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_e

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTre

Keystone Engine 0.9.2 has a use-after-free in llvm_ks::X86Operand::getToken.

Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl.

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf68

mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235.

LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from

RawSpeed (aka librawspeed) 3.1 has a heap-based buffer overflow in TableLookUp::setTable.

UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExt

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004.

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all