2019

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly va

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race conditio

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of vi

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_

KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBu

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when pro

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to acce

The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive in

Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploa

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_d

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon

An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigg

Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera sessi

While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorr

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapd

A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in M

While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdra

In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MD

Veeam ONE Reporter 9.5.0.3201 allows CSRF.

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The o

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reve

An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communicat

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sie

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sie

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Si

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Si

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLin

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES4

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activ

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, bec

The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?a

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless A

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to p

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0

In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes

Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers o

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a resul

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a res

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a r

C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown ty

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artif