2019

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during install

An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration i

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execu

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open d

The Anviz Management System for access control has insufficient logging for device events such as door open requests.

Anviz access control devices expose credentials (names and passwords) by allowing remote attackers to query this informa

Anviz access control devices perform cleartext transmission of sensitive information (passwords/pins and names) when rep

Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking vulnerability that could allo

LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrate

In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrate

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers

Zabbix before 5.0 represents passwords in the users table with unsalted MD5.

illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple thr

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an at

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SI

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs

There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote at

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions ea

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently

Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(

A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] al

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in ind

When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into t

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can le

A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wit

An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 se

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically craft

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard vi

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under ce

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file

On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining co

An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and belo

Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain no

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS

OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite

Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.

Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authen

A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in the page include/Admin

A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/c

A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scr

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before

The news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.

The csrf_callback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it al

PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_Li

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "c