2019

Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plu

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class an

MiniDLNA has heap-based buffer overflow

TWiki allows arbitrary shell command execution via the Include function

minidlna has SQL Injection that may allow retrieval of arbitrary files

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper valida

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the

FreeTDS through 1.1.11 has a Buffer Overflow.

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lie

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary fi

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other

In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in w

In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3

burn allows file names to escape via mishandled quotation marks

python-docutils allows insecure usage of temporary files

overkill has buffer overflow via long player names that can corrupt data on the server machine

In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.

An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installin

Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impa

European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain Exp

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping.

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name

SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially res

Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO (

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf i

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a53

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially re

TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result cod

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly

Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not bei

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL execu

Bitlbee does not drop extra group privileges correctly in unix.c

qtparted has insecure library loading which may allow arbitrary code execution

ytnef has directory traversal

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5

A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET o

A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows

In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Securi