2019

In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin,

In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injecti

A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.

The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_c

An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python scri

SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows rem

Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a differen

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does no

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not p

There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a

Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified at

A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and p

verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static strin

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles

Linear eMerge E3-Series devices allow Unrestricted File Upload.

Linear eMerge E3-Series devices allow Command Injections.

Linear eMerge E3-Series devices allow Directory Traversal.

Linear eMerge E3-Series devices have Default Credentials.

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

Linear eMerge 50P/5000P devices allow Authentication Bypass.

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Linear eMerge E3-Series devices have a Version Control Failure.

DOSBox 0.74-2 has Incorrect Access Control.

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by i

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

Nortek Linear eMerge 50P/5000P devices have Default Credentials.

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default acc

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account pass

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

Prima Systems FlexAir devices have Default Credentials.

Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable nam

Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitr

IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP U

Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It

njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after t

In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote a

In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of

In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of

An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.