2021

A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to valida

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creat

IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an

LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings,

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2

The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped b

The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter wh

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter be

The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before u

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parame

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter befor

The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user

An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE

Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113,

Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmwa

Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affec

Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xto

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parame

An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroiz

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations perfor

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server

A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to ch

Adobe Media Encoder version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially

Adobe Illustrator version 25.2.3 (and earlier) is affected by a potential Command injection vulnerability when chained w

Adobe Illustrator version 25.2.3 (and earlier) is affected by an memory corruption vulnerability when parsing a speciall

Adobe Photoshop versions 21.2.9 (and earlier) and 22.4.2 (and earlier) is affected by a stack overflow vulnerability due

Adobe Character Animator version 4.2 (and earlier) is affected by a memory corruption vulnerability when parsing a speci

Adobe Prelude version 10.0 (and earlier) is affected by a memory corruption vulnerability when parsing a specially craft

Adobe Premiere Pro version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially

Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially c