2019

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

TVT NVMS-1000 devices allow GET /.. Directory Traversal

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user t

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.1

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An ap

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicatio

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vu

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an a

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege

Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vul

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is a

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE at

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources,

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Glob

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 E

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations.

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to ex

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Erro

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES4

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x b

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1R