2021

A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perfor

SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attac

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously

DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can e

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a r

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously craf

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload fie

An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.ph

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/logi

libmysofa is vulnerable to Heap-based Buffer Overflow

Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The par

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection v

A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacki

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross

On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally c

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows atta

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows atta

Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attacke

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the cust

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 fi

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM fil

FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to Jupy

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php.

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categor

A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=bl

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attacker

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processi

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvO

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iO

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously cra

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 an

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Se

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadO

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Sec

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious appli

The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS 15. An attacker with p

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 1

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A person with access to a h

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malici

A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visi

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, ma

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malic