2019

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defens

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the co

Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to ob

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cros

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the co

Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoo

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform d

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass

Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obta

Incorrect security UI in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially spoof t

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications fr

Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event handli

IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to emb

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious

The Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that include an API key without

yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks

JBoss KeyCloak: XSS in login-status-iframe.html

marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerab

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote atta

Cross-site scripting (XSS) vulnerability in Accentis Content Resource Management System before October 2015 patch allows

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows

Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue

nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Control

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condi

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic f

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential vi

In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead

In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. Thi

In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to lo

In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote inf

In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could le

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling

In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from

Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials w

Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote a

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC a

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL

A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an erro

SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_

SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the under