2021

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.

NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.

An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registrat

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.

The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.

HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a singl

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Int

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a use

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Admi

There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get source code informatio

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to perform a clickjacking att

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to impr

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system info

IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information discl

The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) us

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated remote attacker can conduc

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_AD

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls io

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting (

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.

An open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to spoofing. To exploit the vuln

Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content.

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` impleme

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooli

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of divisi

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that u

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a de

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a de

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from ou

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from ou

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial