2021

An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within several special pages, a priv

An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within several gift-related specia

An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalUserRights page provid

Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP In

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or

A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers to execute arbitrary web

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and in

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site re

IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability all

A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated u

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any att

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary scr

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004.

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability a

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability al

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi

In Artica Pandora FMS <=754 in the File Manager component, there is sensitive information exposed on the client side whi

Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attac

A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers

A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permis

Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to J

Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XX

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djv

IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configura

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and

Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote aut

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in conne

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length co

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which m

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or esc

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on t

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a fo

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers wi

There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform s

PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side