2021

IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.

HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-cr

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious java

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database

Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulne

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.

Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27

Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <

Incorrect Access Control in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1

Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27

# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P`

# Vulnerability in `rand-quote` and `hitokoto` plugins **Description**: the `rand-quote` and `hitokoto` fetch quotes fro

# Vulnerability in `title` function **Description**: the `title` function defined in `lib/termsupport.zsh` uses `print`

Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered

Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all v

Serva 4.4.0 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcod

Pinkie 2.15 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcod

An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allow

Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that

Nodebb is an open source Node.js based forum software. In affected versions a prototype pollution vulnerability in the u

Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verific

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a

Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before

Stored cross-site scripting (XSS) was possible in protection plan details. The following products are affected: Acronis

Stored cross-site scripting (XSS) was possible in activity details. The following products are affected: Acronis Cyber P

Cross-site scripting (XSS) was possible in notification pop-ups. The following products are affected: Acronis Cyber Prot

Self cross-site scripting (XSS) was possible on devices page. The following products are affected: Acronis Cyber Protect

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) b

DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (W

The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the na

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_pa

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validati

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php. The varia

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to ke

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi c

vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php.

youtube-php-mirroring (last update Jun 9, 2017) is affected by a Cross Site Scripting (XSS) vulnerability in file ytprox

issabelPBX version 2.11 is affected by a Cross Site Scripting (XSS) vulnerability. In file page.backup_restore.php, the

Workerman-ThinkPHP-Redis (last update Mar 16, 2018) is affected by a Cross Site Scripting (XSS) vulnerability. In file C

twmap v2.91_v4.33 is affected by a Cross Site Scripting (XSS) vulnerability. In file list.php, the exit function will te

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the e