2021

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful b

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a r

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/syst

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly disco

The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expressi

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermedi

The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote a

An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web se

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linu

IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by se

IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error

IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for i

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By s

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements

Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization.

Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwor

Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalati

Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification o

Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.

Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Exec

Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escal

Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via

Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation as nagios via i

Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server t

Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php.

Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code Execution as root via vecto

Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read

In ArangoDB, versions v2.2.6.2 through v3.7.10 are vulnerable to Cross-Site Scripting (XSS), since there is no validatio

The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allo

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management Sys

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated u

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin before 2.1.20 did not

The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stor

The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) v

The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'hotja

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did n

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output b