2019

Moodle before 2.2.2 has users' private files included in course backups

Moodle has a database activity export permission issue where the export function of the database activity module exports

The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.

The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColu

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege es

SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended J

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.

The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged user

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticate

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated att

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2,

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker

An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31,

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attac

hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which a

udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by

In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This

index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/in

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a sy

poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lea

In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to l

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 J

In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks.

In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing b

In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input valid

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device

In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corru

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insuffici

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) co

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbi

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arb

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote atta

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier