2021

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug

An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/membe

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicio

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows

Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw. An authenticated

Prototype pollution vulnerability in 'nestie' versions 0.0.0 through 1.0.0 allows an attacker to cause a denial of servi

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vu

There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma

There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulne

Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege

Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin (`@backstage/pl

dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly c

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Ba

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this v

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabili

There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of t

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may

There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical acce

There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impai

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure con

The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability i

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access v

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain se

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because th

Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.

When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the

A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. T

The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data

Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window t

HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (speci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Se

MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change request

A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scrip

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 t

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote aut

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vuln

A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, t

A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnera

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background v

FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.cl

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an e

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an