2019

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests t

In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrat

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3

A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form valid

A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePas

Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file on the Jenkins m

A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection fo

A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doT

PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in the Administration pag

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even

A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attack

A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, re

A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an

A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access s

A vulnerability in the internal packet processing of Cisco Aironet Series Access Points (APs) could allow an unauthentic

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could a

A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could al

A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to g

A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authe

A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenti

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) So

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) So

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an una

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) So

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker

A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cro

A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote

A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)

A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (

A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could

A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remo

A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote atta

A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XR Software could allow an unauthentica

A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, r

A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco

A vulnerability in the TCP flags inspection feature for access control lists (ACLs) on Cisco ASR 9000 Series Aggregation

A vulnerability in the development shell (devshell) authentication for Cisco Aironet Series Access Points (APs) running

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN

A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could al

Contao 4.7 allows Use of a Key Past its Expiration Date.

Contao 4.7 allows CSRF.

Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.

Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.

Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow