2021

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) vi

A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device,

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possi

A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 an

In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via po

Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the

Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive informati

An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authentic

Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by con

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employe

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.

Airangel HSMX Gateway devices through 5.2.04 allow CSRF.

A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 71

The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constr

An XSS issue was discovered in the google_for_jobs (aka Google for Jobs) extension before 1.5.1 and 2.x before 2.1.1 for

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from applicatio

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTM

In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue

In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and e

A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an att

Visual Studio Elevation of Privilege Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Azure Sphere Tampering Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Feedback Hub Elevation of Privilege Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

FSLogix Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Microsoft Access Remote Code Execution Vulnerability

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Exchange Server Spoofing Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local use

Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected

Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title paramete

In JetBrains Hub before 2021.1.13690, stored XSS is possible.

In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.

In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.

In JetBrains TeamCity before 2021.1.2, stored XSS is possible.

In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.