2019

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Wind

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, a

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trig

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk Au

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk Au

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk Aut

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Succ

Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to dis

A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software e

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that the

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file

A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to m

The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected cli

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC.

In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and t

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers t

A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin use

GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to

An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a re

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated a

A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in

In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting s

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/diss

In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c b

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/di

In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_

In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/pack

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/disse

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wi

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/d

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates i

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, a

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary