2019

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container ru

Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to a

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain charact

A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Le

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handlin

It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal com

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SS

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get th

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory

Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, v

A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple

Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when

An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modif

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST int

An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.

Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.

ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion Syst

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configur

The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows atta

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have un

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have un

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have un

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have un

In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which al

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations"

hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7

IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered

The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open"

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL P

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5Ha

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execut

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that h

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive

A code injection issue was discovered in ipycache through 2016-05-31.

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way pa