2021

Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of

Symfony/Http-Kernel is the HTTP kernel component for Symfony, a PHP framework for web and console applications and a set

A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allow

An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to readin

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary command

WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrie

The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before vers

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)

The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with n

Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading da

Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google L

Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without exp

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security To

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregati

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured.

PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary scr

Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allow

Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote at

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17

Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and ear

Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 all

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and

Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text expl

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

Windows 10 Update Assistant Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as

Windows 10 Update Assistant Elevation of Privilege Vulnerability

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be ab

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects

Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instruct

OS Command Injection vulnerability in debug_fcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform comm

Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows a

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cro

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corrup