From DHS/US-CERT's National Vulnerability Database
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to...
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).
The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...
Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 220.127.116.111 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows.