2019

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting

A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to re

An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to pr

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializ

An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle o

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper a

An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locat

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memo

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. Th

ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and c

Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with .

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy

Pacemaker before 1.1.6 configure script creates temporary files insecurely

statusnet before 0.9.9 has XSS

Elgg through 1.7.10 has XSS

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled.

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile.

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly r

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .

MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could l

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/b

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which an input index value is

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it inc

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in whi

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypas

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authe

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr

IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unautho