2021

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all

IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information discl

IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. I

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed tech

On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection fea

On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers e

SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the

SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617,

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engi

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to director

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end

Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypt

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or dire

The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persi

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the b

SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user r

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Work

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attack

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attack

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has

A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software all

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by th

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions

A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-

A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full nam

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via

Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fi

Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix

A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a

Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafte

Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fil

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, m

The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete co

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, w

The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape