2019

An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issu

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12

An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sa

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in S

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicatio

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari

This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail me

This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Mojave 10.14.4. A malicio

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS M

A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling.

A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling.

A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able t

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous a

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the x

A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a diffe

An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security c

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated use

IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi

shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-l

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overf

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command inj

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution wi

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon A

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because const

Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string

Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from

Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from fir

Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid st

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to en

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received fro

Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Comp

Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer ov

Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in S

Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto,

Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handler

Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass th

Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is

Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB