2021

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Richdocuments application prior to version

NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfigurationDe

NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback().

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.

Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 a

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. In affected versions of Pter

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Li

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0.

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5,

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inacces

Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to

The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribu

The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes,

The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing a

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameter

The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before us

The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before

The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could al

The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it

The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanit

The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options,

The jQuery Reply to Comment WordPress plugin through 1.31 does not have any CSRF check when saving its settings, nor san

The Video Gallery WordPress plugin before 1.1.5 does not escape the Title and Description of the videos in a gallery bef

The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admi

The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its 'Default Text to Dis

The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could all

The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode

The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the f

In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to l

In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of p

In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This co

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This

In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local es

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local e

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation