2021

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) tak

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up i

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize p

Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG ((OTRS))

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects:

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration file

Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue,

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: JS module). Supported versions that are

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affecte

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are af

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported

Vulnerability in the Oracle Financial Services Crime and Compliance Investigation Hub product of Oracle Financial Servic

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.0

IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self servi

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redire

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed t

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed t

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an enc

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-onl

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, def

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-t

Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Ne

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, fi

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ra

Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass client certificate requirem

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.

Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.1

hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests wi

IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive

A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access

HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperm

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissio

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was di

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via ma

After Effects versions 18.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclos

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnera

Signatures are written to disk before and read during verification, which might be subject to a race condition when a ma

A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 thr