| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call. |
| Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows. |
| Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. |
| An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege |
| An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field. |
| An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json. |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46). |
| Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46). |