2019

In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Securi

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escala

pootle 2.0.5 has XSS via 'match_names' parameter

Tiki Wiki CMS Groupware 5.2 has CSRF

Tiki Wiki CMS Groupware 5.2 has XSS

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion

mailscanner can allow local users to prevent virus signatures from being updated

pixelpost 1.7.1 has XSS

pixelpost 1.7.1 has SQL injection

An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation.

Zoo 2.10 has Directory traversal

Snoopy before 2.0.0 has a security hole in exec cURL

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operat

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to s

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a

CoreHR Core Portal before 27.0.7 allows stored XSS.

Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.

Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomP

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio P

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Param

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cau

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cau

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web req

An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requ

Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web r

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web req

An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mech

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mech

In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environme

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by im