PT-2021-4003

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.005.20054 and earlier Acrobat Reader DC versions 2020.004.30005 and earlier Acrobat Reader DC versions 2017.011.30197 and earlier Description The issue is related to an Improper Neutralization of Special Element...

CVE-2021-28803: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...

The vulnerability of the Dovecot mail server arises from incorrect neutralization of special elements in the output data used by the incoming component, allowing attackers to expose user credentials.

The vulnerability of the Dovecot mail server is related to incorrect neutralization of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a remote attacker to expose user credentials...

CVE-2021-27658: Improper Neutralization of Input During Web Page Generation

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659: Improper Neutralization of Input During Web Page Generation

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-33348: Improper Neutralization of Input During Web Page Generation

An issue was discovered in JFinal framework v4.9.10 and below. The "set" method of the "Controller" class of jfinal framework is not strictly filtered, which will lead to XSS vulnerabilities in some cases...

PT-2021-20664

Name of the Vulnerable Software and Affected Versions: Synology Download Station versions prior to 3.8.16-3566 Description: The issue is related to improper neutralization of special elements used in a command, allowing remote authenticated users to execute arbitrary code. Recommendations: For...

CVE-2021-27479: Improper Neutralization of Input During Web Page Generation

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users...

VulnCheck KEV: CVE-2021-20028

SonicWall Secure Remote Access SRA products contain an improper neutralization of a SQL Command leading to SQL injection...

CVE-2021-3529: Improper Neutralization of Input During Web Page Generation

A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary...

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

CVE-2021-29414: Improper Neutralization of Special Elements in Output Used by a Downstream Component

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

PT-2021-7987

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the affected applications do not validate webpage input. This could allow ...

DEBIAN-CVE-2020-28015

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character...

Design/Logic Flaw

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character...

CVE-2020-28026

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...

CVE-2020-28021

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file which indirectly leads to remote code execution as root via AUTH= in a MAIL FROM command...

CVE-2020-28015

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character...

CVE-2020-28015

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character...