2021

Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce a

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to in

Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams inte

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass th

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upl

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal pa

better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive p

A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web inter

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softwa

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-i

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulner

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of co

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properl

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properl

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of con

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of m

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversiz

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order

The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of a

Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the recep

api/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has Incorrect Access Contr

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of

The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsol

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of mult

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of cont

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows

The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cry

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two c

An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker wit

An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allo

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: O