2019

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attack

An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If i

PyXML: Hash table collisions CPU usage Denial of Service

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exp

A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a

plow has local buffer overflow vulnerability

nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences

A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.

An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4

An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwr

wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication.

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname.

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.

Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended a

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCha

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached b

In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to c

The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2)

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive informat

Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to h

Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via

IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escala

Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlle

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal tech

Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual ma

Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due t

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout

An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bin

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bin

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pro

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully ex

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Au

While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Au

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non sec

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Cons

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon A

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially caus

Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was p

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall A

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClo

Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default par