2019

The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_e

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect ru

The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl settin

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting

The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setti

The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.

The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders i

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted che

An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer der

An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Fai

Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they con

libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download

A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST reque

A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacke

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kub

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is e

The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kub

In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (r

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker ca

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22)

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Se

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr a

Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, an

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fail

Various Lexmark products have a Buffer Overflow (issue 3 of 3).

Various Lexmark products have a Buffer Overflow (issue 2 of 3).

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash th

Various Lexmark products have an Integer Overflow.

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

Various Lexmark products have CSRF.

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbri

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type,

An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part

An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.da

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be trigge

An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to acc

An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft

A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, rem

A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker t

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco