by Kastro CVE-2021-44077 · Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 691 of 786
Zoho
mitre
CVE-2021-43319 · mitre
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping f…
CVE-2021-44223 · mitre
WordPress before 5.8 lacks support for the Update URI plugin header.
CVE-2021-44427 · mitre
An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attacker…
CVE-2021-42099 · mitre
Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
CVE-2021-44093 · mitre
A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit…
CVE-2021-43451 · mitre
SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
CVE-2021-44280 · mitre
attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.
CVE-2021-43691 · mitre
tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php.
CVE-2021-41677 · mitre
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database.
CVE-2021-41678 · mitre
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database.
CVE-2021-41679 · mitre
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database.
CVE-2021-44219 · mitre
Gin-Vue-Admin before 2.4.6 mishandles a SQL database.
CVE-2021-43202 · mitre
In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.
CVE-2021-43685 · mitre
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/S…
CVE-2021-43693 · mitre
vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php.
Unknown
CVE-2021-24915 · Unknown Contest Gallery – Photo Contest Plugin for WordPress
Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure
D-Link
Zoom Video Communications Inc
CVE-2021-34423 · Zoom Video Communications Inc Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)
Buffer overflow in Zoom client and other products
Apache Software Foundation
CVE-2021-44140 · Apache Software Foundation Apache JSPWiki
Arbitrary file deletion on logout
Bitdefender
CVE-2021-3554 · Bitdefender Endpoint Security Tools for Linux
Improper Access Control vulnerability in the patchesUpdate API
GlavSoft LLC
CVE-2021-42785 · GlavSoft LLC TightVNC Viewer
Buffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.59
NodeBB
CVE-2021-43786 · NodeBB NodeBB
API token verification can be bypassed
CVE-2021-43787 · NodeBB NodeBB
XSS via prototype pollution
vmware
wpWave
CVE-2021-36916 · wpWave Hide My WP (WordPress plugin)
WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated SQL injection (SQLi) vulnerability
Alfasado Inc.
AMD
baserproject
Business-DNA Solutions GmbH
CVE-2021-42544 · Business-DNA Solutions GmbH TopEase
Lack of Rate limiting in Authentication in TopEase
CVE-2021-42115 · Business-DNA Solutions GmbH TopEase
Missing HTTPOnly flag on sensitive cookie in TopEase
CVE-2021-42545 · Business-DNA Solutions GmbH TopEase
Insufficient Session Expiration in TopEase
Dell
CVE-2021-36313 · Dell CloudLink
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability.
CVE-2021-36314 · Dell CloudLink
Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability.
CVE-2021-36330 · Dell Dell EMC Streaming Data Platform
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability.
CVE-2021-36312 · Dell CloudLink
Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability.
EFM networks & multimedia
CVE-2020-7879 · EFM networks & multimedia ipTIME C200 IP Camera
ipTIME C200 IP Camera command injection vulnerability
django-helpdesk
CVE-2021-3994 · django-helpdesk django-helpdesk/django-helpdesk
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
Goqual
TOBESOFT
Huawei
ohmyzsh
CVE-2021-3727 · ohmyzsh ohmyzsh/ohmyzsh
OS Command Injection in ohmyzsh/ohmyzsh
CVE-2021-3769 · ohmyzsh ohmyzsh/ohmyzsh
OS Command Injection in ohmyzsh/ohmyzsh
CVE-2021-3726 · ohmyzsh ohmyzsh/ohmyzsh
OS Command Injection in ohmyzsh/ohmyzsh
kevinpapst
CVE-2021-3985 · kevinpapst kevinpapst/kimai2