2019

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the soft

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages o

In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is in

Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of priv

Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privile

Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation o

Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escal

Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial es

Improper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all versions, may allow an authen

Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may all

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before versi

Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially ena

Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to po

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between t

Improper conditions check in the Linux kernel driver for the Intel(R) FPGA SDK for OpenCL(TM) Pro Edition before version

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially en

Insufficient memory protection for Intel(R) Ethernet I218 Adapter driver for Windows* 10 before version 24.1 may allow a

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesy

Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may a

Improper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an auth

On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary loc

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button fir

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' progra

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (pr

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code ex

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The

IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by chan

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomple

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker ca

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with ver

An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploa

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID

python-requests-Kerberos through 0.5 does not handle mutual authentication

imagemagick 6.8.9.6 has remote DOS via infinite loop

ZF2014-03 has a potential cross site scripting vector in multiple view helpers

eDeploy has tmp file race condition flaws

eDeploy has RCE via cPickle deserialization of untrusted data

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

jersey: XXE via parameter entities not disabled by the jersey SAX parser

CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration

read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro).

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to

Huawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability. Due to improper configuration, the a

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;