2021

In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information d

In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local i

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor

Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and

In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Int

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting (XSS) vulnerability in Wechat.php.

In the TransformXML processor of Apache NiFi before 1.15.1 an authenticated user could configure an XSLT file which, if

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. By using an action=r

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to us

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authenticatio

Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distribu

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack

In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 d

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fu

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security To

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafte

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (

pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used,

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-a

Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admi

An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any

A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Col

Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column t

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a fol

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected v

Thruk before 2.44 allows XSS for a quick command.

BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user t

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior t

In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. Thi

In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local

In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could le

In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escal

In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalat

In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition.

In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of

In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missi

In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This