2019

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscr

EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full ac

EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing

EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attac

EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social securit

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the pr

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the pr

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain fu

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in

PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name

libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a cra

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firm

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import

An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web

SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service v

YSoft SafeQ Server 6 allows a replay attack.

Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 al

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CS

DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.

OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)

OX App Suite 7.8.4 and earlier allows SSRF.

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device n

Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enab

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enab

When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any fil

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrec

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an

IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consu

In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c

NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication s

Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3

An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).

Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter)

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controll

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properl

Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebCo