2021

A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function.

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an aut

NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthentica

A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 S

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alt

An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting fr

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vu

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file rea

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a spe

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVisi

In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjack

PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descri

Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all up

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at

Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute Ja

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any

Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute ch

rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in

Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value `2

Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids

The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow mess

The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Sc

The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability

The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new cal

The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CS

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size

The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it

The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.

The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do

The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before

The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outp

The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_po

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authen

The Easy Accordion WordPress plugin before 2.0.22 does not properly sanitize inputs when adding new items to an accordio

The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allow

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Condit

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing t

CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php fi

/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response difference

OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apach

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All ve

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitti

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visi