2021

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Netw

An Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS on MX Series c

An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series plat

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon

In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of

A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Con

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash t

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP

Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affec

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenti

IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validati

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and

The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sa

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline"

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotel

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalin

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local us

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 1

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Process

This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchO

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

firefly-iii is vulnerable to URL Redirection to Untrusted Site

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and valida

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for th

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTION

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow

In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged applicatio

Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privile

Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browser_today hidden c

Backstage is an open platform for building developer portals. In affected versions A malicious actor could read sensitiv

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability al

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow u

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, wh

The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding post

The Tutor LMS WordPress plugin before 1.9.9 does not escape some of its settings before outputting them in attributes, w

The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files Word

The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers t