2019

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it

CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.

A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demo

Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject a

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large intege

Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote atta

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befor

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restriction

In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed wi

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for

In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was a

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade is

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation i

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authenti

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauth

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CP

A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote at

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element,

Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. Thi

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has st

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker t

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filenam

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation o

Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileg

Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a priv

Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potenti

A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remo

A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke

A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow

bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x bef

A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-

A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated

A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an

A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac clien

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to impr

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to impr

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to i