2021

Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searc

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Q

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via th

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System i

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject ar

A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite ab

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abus

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC applica

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider

Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information.

Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execu

An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 al

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versi

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images w

Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 b

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from

An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic informati

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14

In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project

In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility le

Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the sev

Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation bet

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_cap

Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform networ

A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacke

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Bus

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an

A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an a

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site script

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remo

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote a

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.

A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue

In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertisi

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formula

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta

Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated atta

The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. Th

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter i

Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to conv

This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709