2021

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execut

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerabili

Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thun

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the addre

Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additio

Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading ext

When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly esca

WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within t

By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that ha

An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a po

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. Th

A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory c

Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of

When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting

The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that tri

When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element cl

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to thi

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER

The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run c

Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled)

By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolo

The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while r

Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user.

Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to

When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have r

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a maliciou

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in

By executing a special command, an user with administrative rights can get access to extended debug functionality on the

An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standal

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulner

SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users

`Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working

The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the lengt

Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.1

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 thro

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 thro

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 thr

Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows r

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4

A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to

Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observabilit