2019

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa

A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framew

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces met

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attac

Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface, allowing physical at

The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 (9) and earlier, does not verify the stat

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker

The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn relea

An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and

Applaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads to an XSS vulnerability with a payload st

An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, an

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11

IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IF

A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, r

A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an unauthenti

A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an au

A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol parser of Cisco Firepower Thre

A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,

A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, l

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local

A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator crede

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator crede

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator crede

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator crede

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x befor

An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11

An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11

An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8