2019

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The o

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reve

An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker

An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communicat

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sie

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sie

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Si

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Si

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra W

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLin

An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wirel

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES4

A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activ

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, bec

ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/i

The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?a

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink

An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless A

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to p

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() cal

A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted ad

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0

This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulner

In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, an

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the

Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers o

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a resul

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a res

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a r

C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown ty

All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artif

Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the

dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature.

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource A

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, Administrator and Resourc

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrite

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being writt

It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a Securi

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d

The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3