CVE-2021-24369
In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form,
CVE-2021-24372
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER[‘REQUEST_URI’] before
CVE-2021-28833
Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796. (CVSS:0.0) (Last Update:2021-06-21)
CVE-2021-24383
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in
CVE-2019-25047
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.
CVE-2021-24373
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET
Best Quiz, Exam and Survey Plugin up to 7.1.17 on WordPress Quiz Result Page result_id access control
A vulnerability was found in Best Quiz, Exam and Survey Plugin up to 7.1.17 on WordPress (Survey Software). It has
Apple iOS up to 12.5.3 ASN.1 Decoder memory corruption
A vulnerability was found in Apple iOS up to 12.5.3 (Smartphone Operating System) and classified as critical. This issue affects
Apple iOS up to 12.5.3 WebKit memory corruption
A vulnerability was found in Apple iOS up to 12.5.3 (Smartphone Operating System). It has been classified as critical. Affected
Apple iOS up to 12.5.3 WebKit use after free
A vulnerability was found in Apple iOS up to 12.5.3 (Smartphone Operating System). It has been declared as critical. Affected
Apple iMovie up to 10.2.3 permission [CVE-2021-30757]
A vulnerability has been found in Apple iMovie up to 10.2.3 and classified as critical. This vulnerability affects an unknown
Backdoor.Win32.Hupigon.aaio Service Port 8202 buffer overflow
A vulnerability has been found in Backdoor.Win32.Hupigon.aaio (Remote Access Software) (the affected version is unknown) and classified as critical. This
Bosch B426/B426-CN/B429-CN/B426-M up to 3.11.4 cleartext transmission
A vulnerability was found in Bosch B426, B426-CN, B429-CN and B426-M up to 3.11.4 and classified as problematic. This issue
Zettlr 1.8.7 markdown-editor cross site scripting
A vulnerability was found in Zettlr 1.8.7. It has been classified as problematic. Affected is an unknown code block of
Advantech WebAccess/SCADA up to 9.0.1 File System path traversal
A vulnerability was found in Advantech WebAccess and SCADA up to 9.0.1 (SCADA Software). It has been declared as critical.
Primion-Digitek Secure 8 sql injection [CVE-2021-3604]
A vulnerability was found in Primion-Digitek Secure 8. It has been rated as critical. Affected by this issue is an
SerenityOS Unzip pathname traversal [CVE-2021-31272]
A vulnerability classified as critical has been found in SerenityOS (the affected version unknown). This affects an unknown functionality of
RIOT-OS up to 2021.01 buffer overflow [CVE-2021-31660]
A vulnerability classified as problematic was found in RIOT-OS up to 2021.01. This vulnerability affects some unknown functionality. Applying the
RIOT-OS up to 2021.01 buffer overflow [CVE-2021-31661]
A vulnerability, which was classified as problematic, has been found in RIOT-OS up to 2021.01. This issue affects an unknown
RIOT-OS up to 2021.01 buffer overflow [CVE-2021-31662]
A vulnerability, which was classified as problematic, was found in RIOT-OS up to 2021.01. Affected is an unknown code. Applying
RIOT-OS up to 2021.01 buffer overflow [CVE-2021-31664]
A vulnerability has been found in RIOT-OS up to 2021.01 and classified as problematic. Affected by this vulnerability is an
Enshiyo MCUsystem Login Page cross site scripting [CVE-2021-32536]
A vulnerability was found in Enshiyo MCUsystem (affected version not known) and classified as problematic. Affected by this issue is
JPress up to 3.3.0 Template Module/Tag Management Module cross site scripting
A vulnerability was found in JPress up to 3.3.0. It has been classified as problematic. This affects an unknown function
CheckSec Canopy up to 3.5.1 Login Page LOGIN_PAGE_DISCLAIMER cross site scripting
A vulnerability was found in CheckSec Canopy up to 3.5.1. It has been declared as problematic. This vulnerability affects an