2019

Low privilege users can access service configuration which contains registry data that admins uses to create or delete e

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate se

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firm

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon

Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve t

Gamera before 3.4.1 insecurely creates temporary files.

rc before 1.7.1-5 insecurely creates temporary files.

xlockmore before 5.43 'dclock' security bypass vulnerability

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within

mono 2.10.x ASP.NET Web Form Hash collision DoS

pam_shield before 0.9.4: Default configuration does not perform protective action

trytond 2.4: ModelView.button fails to validate authorization

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Prem

contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x be

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers t

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/stati

IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability

Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI.

A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow

A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow lo

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.

When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiF

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototy

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated mal

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privi

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiv

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.

Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file t

tog-Pegasus has a package hash collision DoS vulnerability

cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE

cobbler: Web interface lacks CSRF protection when using Django framework

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attack

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative a

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticate

In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins mas

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerabilit