2021

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline

The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3

The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it poss

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Un

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-S

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privil

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privil

This affects the package swiper before 6.5.1.

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling optio

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during s

An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows a

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgi

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play (UPnP) is enabled by defau

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ove

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once fo

In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same inde

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_

In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe c

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent s

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML fil

Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbi

A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate priv

Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary cod

Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised th

Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the rend

Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploi

Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potenti

Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corru

Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploi

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android

Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions r

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of servi

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in pla

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attach

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in

Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged application

An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to ac

An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to dele

An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read

An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers

An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without prope