:: Deepquest ::

D-Link DSL-2750B firmware versions 1.01 through 1.03 suffer from an unauthenticated remote code execution vulnerability.

Servision HVG with firmware below version 2.2.26a100 suffers from a hard-coded backdoor password vulnerability.

Sophos UTM version 9.350-12 with pattern version 92405 (potentially lower) suffers from a cross site scripting vulnerability.

Node.js suffers from an HTTP response splitting vulnerability. Node.js versions 5.6.0, 4.3.0, 0.12.10, and 0.10.42 contain a fix for this vulnerability.

ManageEngine EventLog Analyzer version 10.8 suffers from a privilege escalation vulnerability.

Mihalism Multi Host version 5.0.3 suffers from cross site request forgery and cross site scripting vulnerabilities.

PivotX CMS version 2.3.10 suffers from cross site request forgery and cross site scripting vulnerabilities.

File Replication Pro versions 7.2.0 and below suffers from remote command execution, file disclosure, and directory traversal vulnerabilities.

Yeager CMS version 1.2.1 suffers from cross site scripting, remote file upload, server-side request forgery, and remote SQL injection vulnerabilities.

Exponent version 2.3.7 suffers from a remote code execution vulnerability.