2021

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass

Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypa

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redi

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph lege

Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in

Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided

Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is als

Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is als

Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is als

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a co

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly us

In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary

Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before ve

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that cou

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console

Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overfl

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointe

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointe

1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable h

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. I

Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHos

Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which co

An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webr

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentiall

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connecti

Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple par

Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface

When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&r

In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic

Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9

There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform speci

There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerabi

There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain soft

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versi

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input

There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have t

There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the module

Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker c

A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submit

Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which c

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all version

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb sh