2021

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OT

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook

The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in th

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an

The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, whi

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authenticatio

The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to pe

The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize i

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerabilit

The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting i

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of i

The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET par

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.

Chromium: CVE-2021-30621 UI Spoofing in Autofill

Chromium: CVE-2021-30619 UI Spoofing in Autofill

Chromium: CVE-2021-30617 Policy bypass in Blink

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary

Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co

The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

The Easy Social Icons plugin <= 3.0.8 for WordPress echoes out the raw value of `$_SERVER['PHP_SELF']` in its main file.

The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions availabl

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scr

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simula

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulat

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Deni

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1

bookstack is vulnerable to Server-Side Request Forgery (SSRF)

A vulnerability in the web UI for Cisco Nexus Insights could allow an authenticated, remote attacker to view and downloa

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an au

A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allo

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent

The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and und