Oracle WebCenter (Fatwire) Content Server versions prior to 7 suffer from an improper access control vulnerability.

The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \.pipeWindscribeService named pipe endpoint that allows the Windscribe…

Microsoft Windows Paint suffers from security feature bypass and unsafe file creation vulnerabilities.

Ruckus (Brocade) ICX7450-48 web application has a reflected cross site scripting vulnerability. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected…

Ajax Full Featured Calendar version 2.0 suffers from a remote SQL injection vulnerability.

mySurvey version 1.0 suffers from a remote SQL injection vulnerability.

easyLetters version 1.0 suffers from a remote SQL injection vulnerability.

Employee Work Schedule version 5.9 suffers from a remote SQL injection vulnerability.

EasyService Billing version 1.0 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

Sharetronix CMS version 3.6.2 suffers from a cross site request forgery vulnerability.