2021

A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress Wo

A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfileP

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePr

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial o

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction an

Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the p

The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated an

Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_qui

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppre

An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abusefilter-blocker mes

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versio

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input

Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web A

There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may af

Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_pa

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235.

RawSpeed (aka librawspeed) 3.1 has a heap-based buffer overflow in TableLookUp::setTable.

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cau

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may l

There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, a

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserializati

There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone. Successful exploitation of this

There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may es

There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation o

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may a

An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerabilit

The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypa

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_fil

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote

FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attack

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attac

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker t

A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of paramet

SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 p

Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authenticati

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data rel

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessibl

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass t