2019

TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkRepl

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated att

Huawei S5700 and S6700 have a DoS security vulnerability. Attackers with certain permissions perform specific operations

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain

The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or e

An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected c

An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAP

In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_exp

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default po

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS)

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network acces

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Applica

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Applica

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The RMI com

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 6185

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 6185

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker t

The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all e

Intesync Solismed 3.3sp has XSS.

Intesync Solismed 3.3sp allows Clickjacking.

A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. A

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-120

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D wit

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdrago

Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdrag

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deall

The Work Time Calendar app before 4.7.1 for Jira allows XSS.

make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer o

A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthoriz

When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s us

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the de

SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive informati

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; u

SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScr

Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPr

includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) b