2019

The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, wh

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to c

Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file

A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString()

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The u

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo pr

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privile

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol

Cryptocat strophe.js before 2.0.22 has information disclosure

Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_so

SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which cras

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the

Cryptocat before 2.0.22 has Remote Denial of Service via username

slim has NULL pointer dereference when using crypt() method from glibc 2.17

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.

cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel c

GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attac

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of se

php-symfony2-Validator has loss of information during serialization

MiniUPnPd has information disclosure use of snprintf()

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive dat

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/servl

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Docum

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6

An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wire

An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware

An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor

Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken th

Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash)

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Comm

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitra

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection v

In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.