2021

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute ar

Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticat

Stormshield Endpoint Security before 2.1.2 allows remote code execution.

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payl

The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL inje

Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications

The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticate

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a fi

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control detail

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution du

OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attack

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_sessi

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allo

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary fil

This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the securit

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.a

A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to exec

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection vi

eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability wh

SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php.

bookstack is vulnerable to Improper Access Control

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser"

Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A

Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effe

In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.

Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. A

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel auth

Visual Studio Code WSL Extension Remote Code Execution Vulnerability

Microsoft Office app Remote Code Execution Vulnerability

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mi

A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php.

OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUti

Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configu

A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.