2021

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a user supplied `X-Forwarded-Host` heade

Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified i

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to i

An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker t

A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of paramet

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exis

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circui

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This i

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vu

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This i

The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain n

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset.

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to t

A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could a

Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML v

Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive info

Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Tic

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users

Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connecti

Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML v

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Serv

GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an u

Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.

Sylius is an Open Source eCommerce platform on top of Symfony. In versions of Sylius prior to 1.9.5 and 1.10.0-RC.1, par

Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.s

Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in applica

PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as mult

Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can us

Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege es

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download.

SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.

Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx.

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 p

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was di