2019

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, vers

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” dir

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install dir

VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates

Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be co

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/a

IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Sp

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, ca

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) a

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclos

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a special

IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access t

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong password

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful au

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive info

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories o

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessib

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a

A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display

The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)

An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp

A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authent

Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows att

A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete c

A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers t

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker C

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Mana

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, vers

VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerabilit

Remote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially crafted link in the mess

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intr

An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functi

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to ob

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows a

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP

A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation o

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versio