2019

The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explore

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.

Automattic Mongoose through 5.7.4 allows attackers to bypass access control (in some applications) because any query obj

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the ht

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id par

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchPa

PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs.

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software perform

A Structured Exception Handler (SEH) based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthen

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource tem

Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the use

Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF c

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory m

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory m

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially craft

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in

A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be sus

A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easil

A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to sup

A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to sup

A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not require

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that

In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are pre

A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authent

A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execut

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user

OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication intege

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to cra

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file pe

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedu

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be exe

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SR

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packe

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By c

An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Ju

On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on M

On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may cra

When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 e

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix