2021

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-20

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a cr

A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary co

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the co

In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerabl

Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denia

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a

The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validat

The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of i

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter

The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check fo

The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload an

Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenti

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of

parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affec

Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If expl

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabl

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization re

Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sens

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if a

The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shor

BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'ei

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attacker

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to adminis

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR