2021

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey

StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Update

This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 H

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Si

An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This is

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1,

cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cr

Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-or

Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spo

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to le

Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navi

Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote at

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-o

Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform d

Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had

Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-ori

Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java compone

MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=

A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitra

A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10

A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/

S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.

S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function

Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (ve

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 Word

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arb

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_fi

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filt

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_fi

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_fil

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger

Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attemp

A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Mo