2019

send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulner

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a

D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.

The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery.

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could

In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check

In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds c

In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permi

In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installat

The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens

The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sen

The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive in

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attac

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sen

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensi

A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially

Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of pr

Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p

Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authe

Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive

The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly val

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload

The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the fi

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. Thi

An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to co

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.

An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. V

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.

The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/u

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat