2021

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V b

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30

Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8000P befo

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114,

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4,

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.1

NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass.

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.1

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 reques

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been di

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been di

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnera

In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being v

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being

In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special sc

There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. At