CVE-2021-36872
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].
Source: CVE-2021-36872
CVE-2021-36872
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].
Source: CVE-2021-36872
CVE-2021-3824
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Source: CVE-2021-3824
CVE-2021-21913
An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability.
Source: CVE-2021-21913
CVE-2021-26750
DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file.
Source: CVE-2021-26750
CVE-2021-32987
Null pointer dereference in SuiteLink server while processing command 0x0b
Source: CVE-2021-32987
CVE-2021-32979
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
Source: CVE-2021-32979
CVE-2021-32999
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
Source: CVE-2021-32999
CVE-2021-32971
Null pointer dereference in SuiteLink server while processing command 0x07
Source: CVE-2021-32971
CVE-2021-32959
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
Source: CVE-2021-32959
CVE-2021-32963
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
Source: CVE-2021-32963