2021

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpm

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below

The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the M

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not p

The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded v

The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive up

The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archiv

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image ga

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['RE

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, res

In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, h

The WP Config File Editor WordPress plugin through 1.7.1 was affected by an Authenticated Stored Cross-Site Scripting (X

The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and es

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather

In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sani

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cros

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cros

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Re

neos/forms is an open source framework to build web forms. By crafting a special `GET` request containing a valid form s

mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: h

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admi

Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. T

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local esc

In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escala

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local

In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local e

In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a

In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. Th

In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check

In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race conditi

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a lo

In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This

In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission by

In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to

In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to lo

In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This coul

In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay

In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could l

In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This c

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This co