2018

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or val

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or val

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parame

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly saniti

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly saniti

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly saniti

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly saniti

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user

An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD,

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Informat

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structur

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLoc

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Wi

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofi

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informati

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings conf

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feat

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Feder

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vuln

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Micros

An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, ak

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard,

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vul

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Wi

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initialize

There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data re

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Man

SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode use

Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient

Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to im

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vul

Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.

A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.key

A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible

NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a

IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input contr

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an informatio

A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could a

A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter.

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter.

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /da

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI.