2021

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untr

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.421

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted applica

Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted a

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device in

Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova

hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that cou

Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_adm

Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.

IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed

IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, ca

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal.

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user bro

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the ke

Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system inf

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote

Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and

QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers

Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers acces

Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers acc

Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers down

Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download

An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary w

Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress

Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests

myFax version 229 logs sensitive information in the export log module which allows any user to access critical informati

Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user proces

Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing proce

Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process.

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. A

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console proces

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console proce

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view.

A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-leve

A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenti

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authentica

Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-

An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to

An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions w

An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads t

Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability a

A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to

Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain se

An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13

Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted featu

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was