2018

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on ve

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification by

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST param

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses

scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which l

dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which l

apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources ov

jvminstall is a module for downloading and unpacking jvm to local system. jvminstall downloads binary resources over HTT

nw-with-arm is a NW Installer including ARM-Build. nw-with-arm downloads binary resources over HTTP, which leaves it vul

selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver. selenium-wrapper downloads b

mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulne

headless-browser-lite is a minimal npm installer for phantomjs and slimerjs with no external dependencies. headless-brow

selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver

macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary res

nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which le

fibjs is a runtime for javascript applictions built on google v8 JS. fibjs downloads binary resources over HTTP, which l

atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resource

pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulne

node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to

box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cau

openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resource

curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources

httpsync is a port of libcurl to node.js. httpsync downloads binary resources over HTTP, which leaves it vulnerable to M