2019

TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.

CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage a

In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices du

In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This c

In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could l

In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could

In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. Th

In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could

In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead

In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privileg

In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bound

In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check.

In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code e

In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to re

In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code executi

In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lea

In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission ch

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a deni

data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that s

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (

IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service

IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further

util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, i

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past th

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote a

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attacke

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucent

WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker

Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not req

A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscre

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is differ

Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated a

Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthentic

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to

GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.

CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by

The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive i

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers

On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration:

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 a

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple au

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in t

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of un

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an a

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in