2019

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automati

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka '

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Wind

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, a

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execut

An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trig

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk Au

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk Au

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk Aut

VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosu

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Succ

The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML

Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to dis

A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software e

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out

A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and p

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that the

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), f

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function.

The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page wh

Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered du