2019

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection vulnerability. Successful

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows beca

An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php.

cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization o

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas

An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mis

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor misha

An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption be

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, a

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.

FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnes

The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.

DianoxDragon Hawn before 2019-07-10 allows SQL injection.

IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php.

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.

idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax_levels.

OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.

The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.

The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.

The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py.

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtraction

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attemp

An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading t

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts w

Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a de

An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong o

An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors,

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of

GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input

FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js.

Pvanloon1983 social_network before 2019-07-03 allows SQL injection in includes/form_handlers/register_handler.php.

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management M

Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a

Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an atta

Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update.

Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attac

A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated rem