2019

e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without a

serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code bec

osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote P

In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability a

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent:

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapd

Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdrag

Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing

Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which

Possible integer underflow can happen when calculating length of elementary stream info from invalid section length whic

An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notso

Computrols CBAS 18.0.0 allows Username Enumeration.

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload mal

An issue was discovered in Bitdefender Engines before 7.76808. A vulnerability has been discovered in the dalvik.xmd par

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser

Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section ref

Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdrag

Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapd

Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an

Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snap

Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compu

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons

Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdra

While updating blacklisting region shared buffered memory region is not validated against newly updated black list, caus

An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon

Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer E

ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Sn

Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in

Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdrag

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compu

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon C

Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to

Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon

Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing

Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in

Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Sna

Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler

Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto

An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only u

Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagCon

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartCon

Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-s

Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by using the "