| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. |
| Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP). |
| Monstra CMS 3.0.4 and earlier has XSS via index.php. |
| XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call. |
| Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows. |
| Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. |
| An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege |
| An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field. |
| An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json. |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46). |
