WebsiteBaker version 2.12.2 suffers from a remote code execution vulnerability.
Qiata FTA versions 1.70.19 and below suffer from a cross site scripting vulnerability.
DOMOS versions 5.8 and below suffer from a command injection vulnerability.
MailDepot version 2032 SP2 (2.2.1242) suffers from a session expiration design issue.
The installer component of Cisco AnyConnect Secure Mobility Client for Windows prior to 4.8.02042 is vulnerable to path traversal and allows local attackers to create/overwrite files in arbitrary locations with…
Typesetter CMS 5.1 – ‘Site Title’ Persistent Cross-Site Scripting
GetSimple CMS 3.3.16 – Persistent Cross-Site Scripting (Authenticated)
WebsiteBaker 2.12.2 – ‘display_name’ SQL Injection (authenticated)
MonoCMS Blog 1.0 – Arbitrary File Deletion (Authenticated)
SpinetiX Fusion Digital Signage 3.4.8 – Cross-Site Request Forgery (Add Admin)