2019

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 1

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to ma

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, ma

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS M

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12,

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved

An injection issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, mac

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow)

SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial o

A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Si

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capit

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on th

XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attac

Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devis

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fiel

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer ov

IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This

A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress a

SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.

A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to co

LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV.

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to R

The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially c

Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessib

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter.

MKCMS V5.0 has SQL injection via the bplay.php play parameter.

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of serv

Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfigurat

A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext da

A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivi

A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unsta

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, whic

qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter.