2021

Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subje

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable para

"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"

Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affec

The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and

The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation a

The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end

The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $

An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP cl

This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from header

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath S

dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14

IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the pass

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted serve

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-tran

An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An ev

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote atta

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could al

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL e

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cros

A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker t

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote at

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could al

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin pa

Microsoft Surface Pro 3 Security Feature Bypass Vulnerability

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed

IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerab

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use th

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP re

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie informatio

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie informatio

In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload fea

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes

In Camaleon CMS application, versions 0.0.1 to 2.6.0 are vulnerable to stored XSS, that allows an unauthenticated attack

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported vers

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported vers

Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported v

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported ve

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported ve

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected