Third-Party Disclosure

R7-2019-39 | CVE-2019-5648: LDAP Credential Exposure in Barracuda Load Balancer ADC (FIXED)

R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)

R7-2017-25: Cambium ePMP and cnPilot Multiple Vulnerabilities

R7-2017-08: BPC SmartVista SQL Injection Vulnerability

Multiple vulnerabilities in Wink and Insteon smart home systems

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

R7-2016-28: Multiple Eview EV-07S GPS Tracker Vulnerabilities

R7-2017-01: Multiple Vulnerabilities in Double Robotics Telepresence Robot

R7-2016-24, OpenNMS Stored XSS via SNMP (CVE-2016-6555, CVE-2016-6556)

R7-2016-07: Multiple Vulnerabilities in Animas OneTouch Ping Insulin Pump

Multiple Disclosures for Multiple Network Management Systems, Part 2

R7-2016-06: Remote Code Execution via Swagger Parameter Injection (CVE-2016-5641)

R7-2016-01: Null Credential on Moxa NPort (CVE-2016-1529)

R7-2015-26: Advantech EKI Dropbear Authentication Bypass (CVE-2015-7938)

Multiple Disclosures for Multiple Network Management Systems

R7-2015-22: ManageEngine Desktop Central 9 FileUploadServlet connectionId Vulnerability (CVE-2015-8249)

Multiple Insecure Installation and Update Procedures for RStudio (R7-2015-10) (FIXED)

R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

R7-2014-01, R7-2014-02, R7-2014-03 Disclosures: Exposure of Critical Information Via SNMP Public Community String