2021

vim is vulnerable to Heap-based Buffer Overflow

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitorin

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_quest

A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaSc

A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.

Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which

GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation

In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spuriou

GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-

MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's S

Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file

FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Je

The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earli

File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do

A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an un

A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, w

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attac

Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged us

Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be position

Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL

Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change spe

In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal.

HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.

HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting (

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search paramete

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbit

An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial

Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attack

Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to m

Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle a

Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle request

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet

Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from

Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi

Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evi

Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corru

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory

During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corrup

Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of mem

Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed ev