Huawei HarmonyOS 路径遍历漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A directory traversal vulnerability exists in the Applications module of Huawei HarmonyOS version 2.0, which provides a microkernel-based, full-scenario distribut...

CVE-2021-34666 Add Sidebar <= 2.0.0 Reflected Cross-Site Scripting

The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...

CVE-2021-38152

index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38151

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-34633

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the /youtube-feeder.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.1...

CVE-2021-29781

IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091...

CVE-2021-37466

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...

CVE-2021-37464

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...

OWASP ESAPI 安全漏洞

OWASP ESAPI is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. A security vulnerability exists in OWASP ESAPI version 2.0 RC2 and prior versions. The vulnerability stems from an oracle padding attack...

Micro Star Dragon Center 安全漏洞

Micro Star Dragon Center is an application for management control of MSI components, desktop systems and peripherals from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in MSI Dragon Center version 2.0.104.0, which stems from a program that allows...

AppCMS Arbitrary File Deletion Vulnerability (CNVD-2021-40850)

AppCMS is a content management system CMS for mobile application downloads. A security vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to delete arbitrary files on the site...

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics Local provides a single planning and analytics solution that can be deployed locally. An information disclosure vulnerability exists in IBM Planning Analytics Local version 2.0. An attacker could exploit the vulnerability to obtain sensitive information...

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

CVE-2021-30042

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

Saad Irfan RemoteClinic 跨站脚本漏洞

Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. An attacker can use the "clinic name", "clinic address", "clinic city", or "Clinic Contact" fields to inject...

CVE-2021-27945

The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting XSS vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who...

CVE-2021-27945

The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting XSS vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who...

DEBIAN-CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

CVE-2021-20018

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

UBUNTU-CVE-2021-21772

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...