2019

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/as

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to beco

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH envir

In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is

An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. The content to be signed is

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and Cata

A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, th

The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it t

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vul

This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerabil

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhausti

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no max

COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element.

A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any pa

TrevorC2 v1.1/v1.2 fails to prevent fingerprinting primarily via a discrepancy between response headers when responding

An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code vi

An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafte

An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When uti

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library.

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web r

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web

A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web serv

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft I

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.

In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.

process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certi

SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.

freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging

Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replac

The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows rem

Buffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may be tricked into openin

DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a use

IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the atta

SaltStack RSA Key Generation allows remote users to decrypt communications

webauth before 4.6.1 has authentication credential disclosure

OpenShift cartridge allows remote URL retrieval

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the

A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text whe

Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a con

ReviewBoard: has an access-control problem in REST API

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges

mom creates world-writable pid files in /var/run

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an atta