2019

Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of pr

Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p

Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authe

Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive

A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vuln

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REG

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remo

An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature

The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly val

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] i

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][contro

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persis

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a

Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative

laravel-bjyblog 6.1.1 has XSS via a crafted URL.

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or we

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/pol

b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.

The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the fi

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This co

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. Thi

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This cou

An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to co

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.

An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously

A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under rac

An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable t

Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthRespon

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. V

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP

Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I