2019

A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet P

A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher

A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet P

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.0

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versio

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versio

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versio

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. Wh

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add ar

An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.

In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf

There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is di

PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and

An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181

The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server

Moodle 3.5.x before 3.5.4 allows SSRF.

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.

In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. Us

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User i

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User i

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User i

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perfo

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpag

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnera

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attac

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attacker

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable val

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-

A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary file

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitr

A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the