2021

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Ther

The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a s

The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scri

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path trave

A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbit

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new

A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.3

LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the Led

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially

Cross Site Scripting (XSS).vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php.

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in le

Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for `pa

VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling.

VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interact

The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable

Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 an

InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510) contain a vulnerabi

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote atta

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitra

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote auth

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authentica

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the inform

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote auth

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote auth

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authen

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated

Intune Management Extension Security Feature Bypass Vulnerability

Active Directory Federation Server Spoofing Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Console Window Host Security Feature Bypass Vulnerability

Windows Fast FAT File System Driver Information Disclosure Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

Active Directory Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Print Spooler Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Windows Bind Filter Driver Information Disclosure Vulnerability

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

Windows AD FS Security Feature Bypass Vulnerability