2019

A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke

A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Publi

A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x bef

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-

A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat

A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an

A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac clien

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to impr

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to impr

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input v

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input v

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. A

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates input

An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not

An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lo

php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or o

commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Ro

Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elem

Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attacker

PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative pri

Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded crede

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on

Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM C

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and ea

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and ea

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, A

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and ea

Open redirect vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3.0.4, EC-CU

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2

The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with R