Overview : Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers
Overview : A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a
Overview : New vulnerabilities discovered in FortiOS Affected Product(s) : FortiOS versions 6.2.1 and below. FortiOS versions 6.0.6 and below.
Overview : Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the
Overview : Multiple issues was discovered in Symfony Affected Product(s) : Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0
Overview : New vulnerabilities discovered in MediaWiki Affected Product(s) : MediaWiki before 1.19.4 and 1.20.x before 1.20.3 Vulnerability Details :
Overview : New vulnerabilities discovered in Tiki Wiki Affected Product(s) : Tiki 7.2 & 8.0 RC1 Vulnerability Details : CVE
Overview : Multiple flaws in Openfind MAIL2000 through version 6.0 and 7.0 Affected Product(s) : Openfind MAIL2000 through version 6.0
Overview : Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the ‘themename’ parameter
Overview : Multiple flaws was discovered in NiFi versions 1.3.0 to 1.9.2 Affected Product(s) : Apache NiFi 1.3.0 – 1.9.2
Overview : Apache Shiro before 1.4.2 padding attack through susceptible cookies Affected Product(s) : Apache Shiro 1.4.1 Vulnerability Details : CVE
Overview : Pimcore data leakage Flaws through SQL Injection Affected Product(s) : pimcore/pimcore before 6.3.0 Vulnerability Details : CVE ID :
Overview : Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb API Flaws Affected Product(s) : Philips Taolight Smart Wi-Fi Wiz
Overview : some issues found in phpbb 3.0.x-3.0.6 with an XSS vulnerability. Affected Product(s) : phpbb 3.0.x-3.0.6 Vulnerability Details :
Overview : New vulnerabilities discovered in SAP products Affected Product(s) : SAP Vulnerability Details : CVE ID : CVE-2019-0388 [[CVE-2019-0388] Content
Overview : An attacker can trick a privileged user while using WSO2 IS as Key Manager Affected Product(s) : WSO2
Overview : Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Affected Product(s) : Matrix Synapse before 1.5.0
Overview : An access control issue in MantisBT before 1.2.13 allows users with “Reporter” permissions to change any issue to
Overview : Apache CXF OpenId Connect token service does not properly validate the clientId Affected Product(s) : Apache CXF prior
Overview : drupal6: SA-CORE-2010-002 – Drupal core – Multiple vulnerabilities Affected Product(s) : Drupal6 version 6.16 Vulnerability Details : CVE
Overview : SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. Affected Product(s) :
Overview : linux vserver priviledge escalation in remount code Affected Product(s) : linux vserver 2.6 before 2.6.17 Vulnerability Details :
Overview : Multiple flaws was discovered in Joomla 3.2.0 – 3.9.12 Affected Product(s) : Joomla! CMS versions 3.2.0 – 3.9.12
Overview : An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.