ZMS CMS version 3.2 suffers from multiple client-side cross site scripting vulnerabilities.
CHERRY B.UNLIMITED AES JD-0400EU-2/01 Insufficient Protections
CHERRY B.UNLIMITED AES version JD-0400EU-2/01 suffers from insufficient protection of code (firmware) and data (cryptographic key).
Barracuda Web Application Firewall 8.0.1.008 Post Auth Root
This Metasploit module exploits a remote command execution vulnerability in the Barracuda Web Application Firewall firmware versions 8.0.1.008 (2016-03-22) and below by exploiting a vulnerability in the web administration interface. By sending a specially crafted request it’s possible to inject system commands while escalating to root do to relaxed sudo configuration on the local machine.
Logitech K520 Crypto Issues / Replay Attacks
Logitech K520 keyboards suffer form cryptographic issues and insufficient protection against replay attacks.
Vicon Network Camera Authentication Bypass
Vicon Network Cameras suffer from an authentication bypass vulnerability.
Perixx Computer PERIDUO-710W Insufficient Protections
Perixx Computer PERIDUO-710W suffers from insufficient protection of code (firmware) and data (cryptographic key).
WebKit TypedArray.fill Memory Corruption
WebKit suffers from a memory corruption vulnerability in TypedArray.fill.
Fotoware Fotoweb 8.0 Cross Site Scripting
Fotoware Fotoweb version 8.0 suffers from a cross site scripting vulnerability.
WebKit TypedArray.copyWithin Memory Corruption
WebKit suffers from a memory corruption vulnerability in TypedArray.copyWithin.
CHERRY B.UNLIMITED AES JD-0400EU-2/01 Crypto Issues / Replay Attacks
CHERRY B.UNLIMITED AES version JD-0400EU-2/01 suffers from cryptographic issues and replay attack vulnerabilities.