2021

FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.

FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4.

FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.

The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216

A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality

Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attacker

Student Result Management System In PHP With Source Code is affected by SQL injection. An attacker can able to access of

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbi

A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method ove

ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not v

Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to injec

An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allow

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote at

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that all

reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (ver

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a craft

IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unau

Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (inclu

Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast disc

Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads fir

Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-writte

Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Ste

An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allow

TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, all

A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an atta

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissi

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to l

A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwr

An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific dep

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reol

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink serv

openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.

A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHo

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection vi

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexCon

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginIntercep

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their a

An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in thro

Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows re

Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to

Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to

APfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_ through the payloadtyp

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. A

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript

A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.