2019

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D wit

Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to

While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Sna

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapd

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv

Out of bound read would occur while trying to read action category and action ID without validating the action length of

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Sna

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdrago

Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Au

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then mem

Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdrag

Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdrag

Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdra

Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF is

Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Comput

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapd

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deall

The Work Time Calendar app before 4.7.1 for Jira allows XSS.

make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer o

Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable.

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthoriz

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A s

An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image form

An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so

An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltd

An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, v

When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s us

The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the ins

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the de

Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into th

SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulne

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be e

SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to con

SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading

SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed whe

SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive informati

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; u

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before