2019

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the devic

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the commu

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no CSRF prot

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authenticati

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no bruteforc

The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header.

Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administ

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item.

TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder.

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of

OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinical_rules.php that

The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, witho

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.226

An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can eith

Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.

Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrate

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. Thi

Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could

FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue w

4.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.207

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.168

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.207

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.207

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.2072

HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other produc

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc

joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability al

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The i

IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unautho

Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.

In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group informa

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE,

vBulletin through 5.5.4 mishandles custom avatars.

vBulletin before 5.5.4 allows clickjacking.

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.

REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values.

In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.251

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.207

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.207