2021

The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL st

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a spe

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field o

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient n

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks W

The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or n

The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or n

The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not p

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabil

This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But fi

The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Admi

The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempt

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being co

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in

Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects A

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue a

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symli

It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modifie

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function

A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker t

A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code exec

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of pri

An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or d

An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privile

An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the dr

An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privil

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopbac

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php fil

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. Th

UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specifi

The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change

The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution o