CVE-2021-20690

Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20688

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20687

Cross-site request forgery CSRF vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20686

CVE-2021-20686 is a stored cross-site scripting vulnerability in Kagemai 0.8.8 that allows an arbitrary script to run in a user’s browser. The public documents identify the vulnerable product and version (Kagemai 0.8.8) and describe the impact as arbitrary script execution via unspecified vectors...

CVE-2021-20686

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20685

CVE-2021-20685 concerns the Kagemai bug-tracking system. Multiple sources identify it as a cross-site scripting (XSS) vulnerability in Kagemai versions around 0.8.6–0.8.8, permitting remote attackers to inject arbitrary scripts that run in a user’s web browser. The precise attack vectors are not ...

CVE-2021-20684

Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20684

CVE-2021-20684 is a stored cross-site scripting vulnerability in MagazinegerZ v1.01 (CGI Script Market). The affected component is MagazinegerZ’s web interface used for email newsletter distribution, with the root cause described as an arbitrary script execution in the admin browser when logging ...

CVE-2021-20685

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...

Buffer overflow

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

CVE-2021-27343

CVE-2021-27343 affects SerenityOS (unstructured “Unspecified” entry) in the Crypto::der_decode_sequence() function under /Userland/Libraries/LibCrypto/ASN1/DER.h. The vulnerability is a buffer overflow triggered during RSA key ASN.1 parsing, enabling potential leakage of sensitive information (co...

Rockwell Automation FactoryTalk AssetCentre Book Has Unspecified Vulnerability

Rockwell Automation FactoryTalk AssetCentre is an asset management software tool from Rockwell Automation that allows manufacturers and industrial companies to centrally manage controllers and other automation-related assets. An unspecified vulnerability exists in Rockwell Automation FactoryTalk...

Unspecified Vulnerability in GitLab (CNVD-2021-26101)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

ASB-A-170138865

Bulletin has no description...

CVE-2019-19005

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182...

CVE-2021-20682

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20676

M-System DL8 series type A DL8-A versions prior to Ver3.0, type B DL8-B versions prior to Ver3.0, type C DL8-C versions prior to Ver3.0, type D DL8-D versions prior to Ver3.0, and type E DL8-E versions prior to Ver3.0 allows remote authenticated attackers to bypass access restriction and conduct...

CVE-2021-20675

M-System DL8 series type A DL8-A versions prior to Ver3.0, type B DL8-B versions prior to Ver3.0, type C DL8-C versions prior to Ver3.0, type D DL8-D versions prior to Ver3.0, and type E DL8-E versions prior to Ver3.0 allows remote authenticated attackers to cause a denial of service DoS conditio...

CVE-2021-20630

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors...