2021

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closur

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be pr

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB priv

An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap

Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in S

Emissary is a P2P based data-driven workflow engine. Affected versions of Emissary are vulnerable to post-authentication

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While

Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the r

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. T

Apache Dubbo prior to 2.6.9 and 2.7.9 by default supports generic calls to arbitrary methods exposed by provider interfa

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking whic

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station bef

Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation

Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on.

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which

The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey sear

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise i

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its se

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings,

The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not saniti

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settin

The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any

The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output

The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view,

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before

The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user maki

The Listeo WordPress theme before 1.6.11 did not properly sanitise some parameters in its Search, Booking Confirmation a

The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter bef

The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them

The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_p

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitr

The Photo Gallery by 10Web - Mobile-Friendly Image Gallery WordPress plugin before 1.5.67 did not properly sanitise the

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize

The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDo

IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in furth

IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could c

IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system.

A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the na

IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This a

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the a

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML da

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allo