2019

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion

pixelpost 1.7.1 has SQL injection

Snoopy before 2.0.0 has a security hole in exec cURL

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a

Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mech

CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when u

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation

D-Link DIR-865L has PHP File Inclusion in the router xml file.

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windo

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across dif

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or pass

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests be

In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, lea

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption o

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5).

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5).

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5).

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5).

A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the C

A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allo

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 20

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exp

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19

Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers t

The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context

The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can