2021

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitra

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execu

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.

A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below al

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and b

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below all

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.

A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSan

An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allo

A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator

Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access

DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.

74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&k

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-s

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an a

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS a

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cl

The debug-meta-data plugin 1.1.2 for WordPress allows XSS.

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Se

There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to

There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to m

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability

There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attem

Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web s

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gain

An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext user

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote a

An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptib

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may a

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote a

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inj

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only)

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and be

A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attack

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management.

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encr

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues v

The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login

The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_da

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family pa

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name fi

The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in