ABB HMI fails to perform any signature validation checking during two different transmission methods for upgrade.

The IDAL HTTP server CGI interface contains a URL, which allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. In the IDAL CGI interface, there is…

AZADMIN CMS of HIDEA version 1.0 suffers from a remote SQL injection vulnerability.

GSearch version 1.0.1.0 suffers from a denial of service vulnerability.

GrandNode versions 4.40 and below suffer from arbitrary file download and path traversal vulnerabilities.

dotProject version 2.1.9 suffers from multiple remote SQL injection vulnerabilities.

SeedDMS versions prior to 5.1.11 suffers from persistent cross site scripting vulnerability in out.UsrMgr.php.

SeedDMS versions prior to 5.1.11 suffers from a remote shell upload vulnerability.

SeedDMS versions prior to 5.1.11 suffers from persistent cross site scripting vulnerability in out.GroupMgr.php.

Fortinet’s FortiCam FCM-MB40 product suffers from root code execution, privilege escalation, hardcoded key, and various other vulnerabilities.