2021

An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() locate

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLI

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB(

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequest

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequest

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequest

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Ge

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedL

An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan:

An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStr

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function list_iterator_next()

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function gravity_string_to_va

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_add_check() l

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_splin

An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located

An issue was discovered in faust through v2.30.5. A NULL pointer dereference exists in the function CosPrim::computeSigO

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump l

A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 duri

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createW

An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have in

The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by att

The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block,

The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allow

The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the

The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result

The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which co

The WP Mapa Politico Espana WordPress plugin before 3.7.0 does not sanitise or escape some of its settings before output

The Availability Calendar WordPress plugin before 1.2.2 does not sanitise or escape its Category Names before outputting

The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-S

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowin

The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them

The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a times

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a times

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it i

The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high pri

The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via sho

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts i

A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same netw

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vul

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is

RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB proto

Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusio

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 the

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and includi

Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. Th