2019

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which ma

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privil

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator)

The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is receive

A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker t

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as

An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the erro

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting t

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwar

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any I

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys ar

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a speci

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt e

In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A sit

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST tha

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAP

In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwan

In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history p

In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:

In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a

CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the

The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vuln

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address

Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of t

In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the targe

A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root

Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.

Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/ca

uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by

An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion pro

An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::Sin

An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack ex

An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhau

The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is misha

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called f

The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.