webTareas up to 2.4 Personal Profile Picture /includes/upload.php unrestricted upload
A vulnerability, which was classified as critical, was found in webTareas up to 2.4. Affected is some unknown processing of
Zammad up to 4.1.0 Custom Package command injection
A vulnerability classified as critical was found in Zammad up to 4.1.0. Affected by this vulnerability is an unknown functionality
Zammad up to 4.1.0 Custom Avatar cross site scripting
A vulnerability, which was classified as problematic, has been found in Zammad up to 4.1.0. Affected by this issue is
Zammad up to 4.1.0 Chat cross site scripting
A vulnerability, which was classified as problematic, was found in Zammad up to 4.1.0. This affects an unknown part of
Zammad up to 4.1.0 Article cross site scripting
A vulnerability has been found in Zammad up to 4.1.0 and classified as problematic. This vulnerability affects an unknown code
Node.js up to 12.22.3/14.17.3/16.5.x use after free [CVE-2021-22930]
A vulnerability was found in Node.js up to 12.22.3/14.17.3/16.5.x (JavaScript Library) and classified as critical. This issue affects an unknown
SilverStripe GraphQL Server up to 3.4.1 permission [CVE-2021-28661]
A vulnerability was found in SilverStripe GraphQL Server up to 3.4.1 (Content Management System). It has been classified as critical.
teddy Package up to 0.5.8 type confusion [CVE-2021-23447]
A vulnerability was found in teddy Package up to 0.5.8. It has been declared as critical. Affected by this vulnerability
Zoho ManageEngine ADManager Plus up to 7110 File Copy path traversal
A vulnerability was found in Zoho ManageEngine ADManager Plus up to 7110. It has been rated as critical. Affected by
Artica Integria IMS authorization [CVE-2021-3833]
A vulnerability classified as problematic has been found in Artica Integria IMS (the affected version unknown). This affects some unknown
Xshell prior 7.0.0.76 Title Bar denial of service
A vulnerability classified as problematic was found in Xshell. This vulnerability affects an unknown part of the component Title Bar
Concrete5 up to 8.5.4 IP Address server-side request forgery
A vulnerability, which was classified as critical, has been found in Concrete5 up to 8.5.4. This issue affects an unknown
SilverStripe up to 4.8.1 cross site scripting [CVE-2021-36150]
A vulnerability, which was classified as problematic, was found in SilverStripe up to 4.8.1 (Content Management System). Affected is an
Zoho ManageEngine ADManager Plus up to 7109 xml external entity reference
A vulnerability has been found in Zoho ManageEngine ADManager Plus up to 7109 and classified as problematic. Affected by this
Sophos HitmanPro.Alert prior Build 901 Privilege Escalation [CVE-2021-25270]
A vulnerability was found in Sophos HitmanPro.Alert and classified as very critical. Upgrading to version Build 901 eliminates this vulnerability.
Sophos HitmanPro prior Build 318 Privilege Escalation [CVE-2021-25271]
A vulnerability was found in Sophos HitmanPro. It has been classified as very critical. Upgrading to version Build 318 eliminates
JEECMS 1.1 /member-vipcenter.htm cross site scripting
A vulnerability was found in JEECMS 1.1. It has been declared as problematic. This vulnerability affects some unknown functionality of
Integria IMS 5.0.92 AsyncUpload unrestricted upload
A vulnerability was found in Integria IMS 5.0.92. It has been rated as critical. This issue affects the function AsyncUpload.
Meross MSG100 up to 3.2.2 Messages authentication replay
A vulnerability classified as critical has been found in Meross MSG100 up to 3.2.2. Affected is an unknown code of
Maianscriptworld Maian Cart 3.8 Elfinder Plugin access control
A vulnerability was found in Maianscriptworld Maian Cart 3.8. It has been declared as critical. Affected by this vulnerability is
Ping Identity PingFederate up to 10.3.0 XML File xml external entity reference
A vulnerability was found in Ping Identity PingFederate up to 10.3.0. It has been rated as problematic. Affected by this
Samsung CMFA Framework prior SMR Oct-2021 Release 1 cross site scripting
A vulnerability classified as problematic has been found in Samsung CMFA Framework. This affects an unknown part. Upgrading to version
Samsung livfivextractor prior SMR Oct-2021 Release 1 out-of-bounds read
A vulnerability classified as problematic was found in Samsung livfivextractor. This vulnerability affects an unknown code. Upgrading to version SMR
Samsung InputManagerService prior SMR Oct-2021 Release 1 Touch Event improper authentication
A vulnerability, which was classified as critical, has been found in Samsung InputManagerService. This issue affects an unknown code block