2019

Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username

Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being ret

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET r

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact a

The HPE Nonstop Maintenance Entity family of products are vulnerable to local disclosure of information, such as system

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows

A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5.

A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of pri

CMS Made Simple 2.2.10 has XSS via the m1_name parameter in "Add Article" under Content -> Content Manager -> News.

An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possib

Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cro

A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthen

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an

A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an una

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, rem

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM

A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated,

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function (

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function (

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b fo

Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

Gila CMS 1.9.1 has XSS.

Bludit prior to 3.9.1 allows a non-privileged user to change the password of any account, including admin. This occurs b

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A remote code exection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than