The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...

CVE-2019-8418: Undefined Security Weakness

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

Vulnerability of the Server component: Security: Audit of the Oracle MySQL database management system, allowing a hacker to cause a service failure.

The vulnerability of the Server: Security: Audit component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

CVE-2019-6438: Undefined Security Weakness

SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems...

Rukovoditel Project Management CRM 2.4.1 - lists_id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Rukovoditel Project Management CRM 2.4.1 - 'listsid' SQL Injection Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/ Version: 2.4.1 Categor...

CVE-2018-5915: Undefined Security Weakness

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...

CVE-2019-6440: Undefined Security Weakness

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2018-4181: Undefined Security Weakness

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions...

Design/Logic Flaw

A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...

CVE-2018-2499

A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...

CVE-2018-2499

A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...

CVE-2018-2499

The CVE-2018-2499 entry concerns SAP Financial Consolidation Cube Designer. A security weakness could allow an attacker to discover the password hash of an admin user. The issue is addressed by fixes in BOBJ_EADES for versions 8.0 and 10.1. No exploitation details are provided beyond this descrip...

CVE-2019-0249: Undefined Security Weakness

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

CVE-2018-18893: Undefined Security Weakness

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java...

CVE-2018-15335: Undefined Security Weakness

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...

Sql injection

An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter...

CVE-2018-19409: Undefined Security Weakness

An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used...

CVE-2018-16396: Undefined Security Weakness

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats...

CVE-2018-19068: Undefined Security Weakness

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials...

CVE-2018-19074: Undefined Security Weakness

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88...