2021

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detec

Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface a

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion,

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminl

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to exec

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attack

The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login

ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or a

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated a

CITSmart before 9.1.2.23 allows LDAP Injection.

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load

LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.

NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary fil

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload res

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injecti

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command inject

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command inject

An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remote

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalat

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow a

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially cr

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending

An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined insi

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 co

An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rd

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters

An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon.

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisad

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 8

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng /

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 88888

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2U