2021

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php.

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categor

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvO

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously cra

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 an

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadO

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious appli

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A person with access to a h

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malici

A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visi

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malic

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scr

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type

In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, wil

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user t

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented b

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.

A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0.

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may a

There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitatio

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may c

There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race condition

There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may

There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabil

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerabilit

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerabili

A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerabil

A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to caus

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerabilit

A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers m

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exp

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerabilit

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers ma

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerabili

A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to c

There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service c

There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affe

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be

An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the hos

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Sup