2021

Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 the admin api has exposed some internal hidd

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in admin

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using

Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vuln

Shopware is an open source eCommerce platform. Potential session hijacking of store customers in versions below 6.3.5.2.

An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers fo

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows att

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstr

A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via c

Shopware is an open source eCommerce platform. Creation of order credits was not validated by ACL in admin orders. Users

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via craft

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted dj

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circum

Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server termina

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite ar

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the

Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.

Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php.

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied file

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbi

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perfor

Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.

Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce

Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper ce

SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.

There is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product. An attacker can use this

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection s

In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerab

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.ph

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.

phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.

In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter.

Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.

Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.

Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the act parameter in bbs/move_update.php.

SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.

An issue was discovered in JFinal framework v4.9.10 and below. The "set" method of the "Controller" class of jfinal fram

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter.

In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.

Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.

When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firef

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed ev