2019

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] i

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][contro

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persis

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a

Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.

laravel-bjyblog 6.1.1 has XSS via a crafted URL.

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or we

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/pol

b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This cou

A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under rac

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I

find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut

prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.

The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerabil

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count paramete

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enfor

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memo

A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'W

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofi

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memo

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memo

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to success

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, ak

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the ope

A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions,

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folde

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enfor

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip