2021

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacke

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a r

S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Adm

Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of

HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevati

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerabili

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database inform

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.

AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write f

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Onl

The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_bett

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber role

The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, w

The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploade

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated us

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize t

An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the g

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a point

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attac

DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can e

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a r

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.ph

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection v

On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally c

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows atta

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows atta

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the cust

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 fi

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM fil

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processi

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iO

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Se

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Sec

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 1

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, ma

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications u

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and e

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bi

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a loca

In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain

There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow