2021

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. In affected versions of Pter

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5,

Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to

The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribu

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes,

The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing a

The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before

The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could al

The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanit

The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options,

The jQuery Reply to Comment WordPress plugin through 1.31 does not have any CSRF check when saving its settings, nor san

The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery bef

The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admi

The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could all

The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode

The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the f

In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to l

In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of p

In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This co

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local e

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation

In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat

In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local informatio

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa

In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa

In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local informatio

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitiv

As a result of an unquoted service path vulnerability present in the Kiwi Syslog Server Installation Wizard, a local att

In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creat

Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicenam