CVE-2019-11946

A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11941

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2018-7121

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2018-7122

A remote disclosure of information vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2018-7125

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

ZOHO ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability (CNVD-2019-16592)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A cross-site scripti...

GetSimple CMS Remote Code Execution Vulnerability

GetSimple CMS is a content management system CMS written in PHP. A remote code execution vulnerability exists in GetSimple CMS version 3.3.15 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system...

CVE-2019-0289

Under certain conditions SAP BusinessObjects Business Intelligence platform Analysis for OLAP, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...

CVE-2019-10921

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

CVE-2018-16138

An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...

CVE-2018-12299

Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names...

CVE-2019-11820

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

CVE-2019-1777

A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the service. The vulnerability is due to insufficient validation of user-supplied input by the...

ZOHO ManageEngine ServiceDesk Plus Information Disclosure Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...

OverIT Geocall Log Management Directory Traversal Vulnerability

OverIT Geocall is a field service management solution from OverIT Italy. A path traversal vulnerability exists in version 6.3 prior to OverIT Geocall build 2:346977, which arises from a failure of a networked system or product to properly filter for specific elements in the path of a resource or...

Micro Focus Content Manager File Upload Vulnerability

Micro Focus Content Manager is an electronic document and records management system. A file upload vulnerability exists in the Web client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. An attacker could exploit this vulnerability ...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

PT-2019-19927 · Unknown · Donation Plugin/Fundraising Platform

Name of the Vulnerable Software and Affected Versions: Donation Plugin and Fundraising Platform versions prior to 2.3.1 Description: The issue concerns a cross-site scripting XSS vulnerability in the csv export functionality of the wp-admin/edit.php page. Recommendations: For versions prior to...

zzcms SQL Injection Vulnerability (CNVD-2019-13263)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/zselite.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'id' parameter...

zzcms SQL Injection Vulnerability (CNVD-2019-13260)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/logincheck.php file in ZZCMS version 8.3. The vulnerability can be exploited by a remote attacker to execute SQL commands with the help of the 'X-Forwarded' parameter in the HTTP...