2021

A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary m

A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the co

The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash.

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy preven

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input befo

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable inp

A compromised content process could have performed session history manipulations it should not have been able to due to

Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS pag

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, res

An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker c

Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may crea

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key

Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14

A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local d

The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allo

A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any un

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virt

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Servic

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

Out-of-bounds Read in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with

Divide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the applicat

GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.

A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HT

Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters

Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.

Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url paramete

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusi

phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippet

Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file h

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH pass

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject

Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Man

Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deser

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not exp

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an i

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an i

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl

There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SP

Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and

There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in wh

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently.

Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering

There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. Th