Archive
March 2019
Vulnerabilities first published in this month (UTC), newest first.
1,196 results · Feed
-
Unscored —
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
-
Unscored —
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such …
-
Medium 6.5
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validat…
-
Unscored —
PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an upl…
-
Unscored —
PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing …
-
Unscored —
PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of…
-
Unscored —
PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.
-
Unscored —
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads…
-
Unscored —
This module enables you to add social media share buttons on your website to its content and pages. The module doesn't …
-
Unscored —
YSoft SafeQ Server 6 allows a replay attack.
-
Unscored —
A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firm…
-
Unscored —
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3…
-
Unscored —CVE-2019-6282 Public exploit
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpa…
-
Unscored —CVE-2019-6279 Public exploit
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulner…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. U…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …
-
Unscored —
Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta…
-
Unscored —
Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote att…
-
High 8.4
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the p…
-
Low 2.9
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while i…
-
High 8.4
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtua…
-
Low 2.9
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social securi…
-
High 7.7
EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local atta…
-
High 8.4
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtua…
-
High 8.4
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain f…
-
High 8.4
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk …
-
High 8.4
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullsc…
-
Medium 4.0
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database…
-
High 8.4
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the p…
-
Medium 4.0
The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the conta…
-
High 8.4
EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full a…
-
High 8.4
eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full acc…
-
High 8.4
EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing…