2021

A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET request

Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.

Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmwar

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4

This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in t

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitra

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitra

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integratio

SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.30

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a rev

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability

An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to a

An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE

Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can ena

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS).

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to e

Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and ear

Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting a

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string const

Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attac

Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Ser

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a

Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Se

Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by i

Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecti

Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manip

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowi

Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.a

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Serv

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. I

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the ele

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized