2019

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safa

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.1

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3,

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Moja

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.1

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath bi

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stac

SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using t

In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstr

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2S

An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() l

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBI

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user t

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blo

The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durati

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtai

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication usin

Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted conten

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed ev

Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through d

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an in

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of secur

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sho

Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed ev

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This co

In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insec

In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to loca

In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could le

In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead

In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead

In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. Th

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows re

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allo

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/a

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which t