2019

In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack c

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When

In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating w

It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the devi

Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instanc

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file tha

An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached clie

It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handle

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles

An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a u

An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on w

An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles

Linear eMerge E3-Series devices allow Privilege Escalation.

Linear eMerge E3-Series devices allow Unrestricted File Upload.

Linear eMerge E3-Series devices allow Command Injections.

Linear eMerge E3-Series devices allow XSS.

Linear eMerge E3-Series devices allow File Inclusion.

Linear eMerge E3-Series devices allow Directory Traversal.

Linear eMerge E3-Series devices have Default Credentials.

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) tha

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the admin

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

Linear eMerge 50P/5000P devices allow Authentication Bypass.

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Linear eMerge E3-Series devices have a Version Control Failure.

DOSBox 0.74-2 has Incorrect Access Control.

An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-m

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold

IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to ex

IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server

IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databa

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused