2019

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on

A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC)

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data im

The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerabilit

AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration. NOTE: the vendor's position is that

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 99

pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete d

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a usern

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow

A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could al

The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.

The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.

The embed-comment-images plugin before 0.6 for WordPress has XSS.

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.

The smokesignal plugin before 1.2.7 for WordPress has XSS.

The megamenu plugin before 2.4 for WordPress has XSS.

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS.

The duplicate-post plugin before 2.6 for WordPress has SQL injection.

The duplicate-post plugin before 2.6 for WordPress has XSS.

The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.

The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words libr

An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library

An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 libra

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitd

A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Soft

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying f

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-midd

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSys

In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore requ

The sender plugin before 1.2.1 for WordPress has multiple XSS issues.

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.

The universal-analytics plugin before 1.3.1 for WordPress has XSS.

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.

The profile-builder plugin before 2.2.5 for WordPress has XSS.

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.