2021

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX ac

The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege use

The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network a

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to th

Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privil

Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows

Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a r

Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed a

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Dow

Privilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows an attacker who can lo

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privilege

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privilege

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EP

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t

A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Eng

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote att

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/li

Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.

Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document.

Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors i

Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line

Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStru

Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content ite

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and ot

PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY

Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability.

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Deb

Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserial

IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters i

A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execu

An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interfa

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolut

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If a

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memor