2019

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to b

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users w

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credential

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated use

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated use

The Security Camera CZ application through 1.6.8 for Android stores potentially sensitive recorded video in external dat

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict Transport Security header. User

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machi

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with v

Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external e

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML d

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispos

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.

HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (a

In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrar

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher m

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or t

There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can t

There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C0

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in Workday through 32 via a

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 2

IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configur

Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.

Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET r

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact a

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows

A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of pri

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, rem

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function (

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b fo

Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

Bludit prior to 3.9.1 allows a non-privileged user to change the password of any account, including admin. This occurs b

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than

A remote code exection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than