2021

Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\b

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The lo

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Cu

In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.

In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.

In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.

In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.

In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.

In JetBrains TeamCity before 2020.2.3, XSS was possible.

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.

In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.

Cross-Site Scripting (XSS) vulnerability in Subrion 4.2.1 via the title when adding a page.

A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to ca

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions

An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 a

Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.

A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final

Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitima

Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to o

Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used

When curl is instructed to get content using the metalink feature, and a user name and password are used to download the

When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known a

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handl

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handl

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handl

An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14

A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir param

A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir param

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the w

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g func

An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4_DescriptorFinder::Tes

An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the function AP4_StszAtom::Wr

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or format

When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would

If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses pri

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in w

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause l

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause a

Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access int

An IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileg

A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attac

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on

A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficie

ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient inp