2021

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before usi

The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in

The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allow

The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared s

The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorith

Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate inform

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Loc

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticate

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is pr

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka

An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier)

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barri

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers compone

An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier)

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A r

An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is v

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file

An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client o

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of

Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that prov

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's `saved_model_cli` tool is

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the `Cudnn

TensorFlow is an open source platform for machine learning. In affected versions the async implementation of `Collective

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlo

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missi

WP DSGVO Tools (GDPR) <= 3.1.23 had an AJAX action, ‘admin-dismiss-unsubscribe‘, which lacked a capability check and a n

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount`

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyR

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm`

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplicati

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behav

Meross Smart Wi-Fi 2 Way Wall Switch (MSS550X), on its 3.1.3 version and before, creates an open Wi-Fi Access Point with

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `Spar

TensorFlow is an open source platform for machine learning. In affeced versions during execution, `EinsumHelper::ParseEq

An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters (it is not constrained t

An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters (it is not constrained t

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters.

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faultin

Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized ag

The affected application uses specific functions that could be abused through a crafted project file, which could lead t

vim is vulnerable to Use of Uninitialized Variable