2021

A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of se

WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.

Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can u

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow

Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a math

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which a

A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remo

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System P

A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System

An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below

A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firep

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat

A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication

A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management

Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.

liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP a

All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string proc

Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.

Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a mal

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nex

Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An a

In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation

In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of pri

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de

In memory management driver, there is a possible system crash due to improper input validation. This could lead to local

In memory management driver, there is a possible system crash due to improper input validation. This could lead to local

In memory management driver, there is a possible system crash due to improper input validation. This could lead to local

In memory management driver, there is a possible system crash due to improper input validation. This could lead to local

In memory management driver, there is a possible information disclosure due to a missing permission check. This could le

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info

In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject

Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attac

Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authentic

There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to

Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker

Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remo

Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated att

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbi

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arb

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to a

Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated at