2021

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows re

IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in fur

A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-exi

GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with A

GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemet

GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autolo

The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.

UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intra

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerat

In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a

Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the

Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the

Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'N

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the

prism is vulnerable to Inefficient Regular Expression Complexity

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript UR

In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break en

Microsoft Accessibility Insights for Android Information Disclosure Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Office Graphics Component Information Disclosure Vulnerability

Windows Storage Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Windows Key Storage Provider Security Feature Bypass Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Installer Denial of Service Vulnerability

Windows Authenticode Spoofing Vulnerability

Azure Sphere Information Disclosure Vulnerability

Visual Studio Code Spoofing Vulnerability

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request,

A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allow

A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowled

Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.

An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a

On all versions of Guided Configuration before 8.0.0, when a configuration that contains secure properties is created an

On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerab