Show filters
321 Total Results
Displaying 131-140 of 321
Sort by:
Attacker Value
Unknown

CVE-2021-24603

Disclosure Date: September 06, 2021 (last updated February 23, 2025)
The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed
Attacker Value
Unknown

CVE-2020-18999

Disclosure Date: August 27, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'.
Attacker Value
Unknown

CVE-2020-18998

Disclosure Date: August 27, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.
Attacker Value
Unknown

CVE-2021-36530

Disclosure Date: August 27, 2021 (last updated February 23, 2025)
ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.
Attacker Value
Unknown

CVE-2021-36531

Disclosure Date: August 27, 2021 (last updated February 23, 2025)
ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary.
Attacker Value
Unknown

CVE-2021-39602

Disclosure Date: August 23, 2021 (last updated February 23, 2025)
A Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the do_mkd function in the ftpproto.c file, which could let a remote malicious user cause a Denial of Service.
Attacker Value
Unknown

CVE-2021-36786

Disclosure Date: August 13, 2021 (last updated February 23, 2025)
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
Attacker Value
Unknown

CVE-2021-36785

Disclosure Date: August 13, 2021 (last updated February 23, 2025)
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.
Attacker Value
Unknown

CVE-2021-34184

Disclosure Date: June 25, 2021 (last updated February 22, 2025)
Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.
Attacker Value
Unknown

CVE-2021-34185

Disclosure Date: June 25, 2021 (last updated February 22, 2025)
Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h