2021

IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing mes

IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability a

IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the

IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communicatio

A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the

Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.

Cloudera Hue 4.6.0 allows XSS via the type parameter.

Cloudera Hue 4.6.0 allows XSS.

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.

PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

Apostrophe CMS versions between 2.63.0 to 3.3.1 are vulnerable to Stored XSS where an editor uploads an SVG file that co

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted UR

Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after

TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in Tenso

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a u

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SplitV` can trig

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for `Trans

TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can b

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `AllToAll`

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution ope

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `ParallelConcat`

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the outpu

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flo

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `Deseriali

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer

TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is c

TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a l

TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large inp

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a larg

TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authe

Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8.

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and tr

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can captu

Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients/register-patient.php vi

Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backl

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Multiple Cross Site Scripting (XSS) vulnerabilities exists in PHPGurukul Shopping v3.1 via the (1) callback parameter in