2019

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in

Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.

LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenti

PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount.

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacke

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PD

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorre

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker

ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows a

When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via

UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks.

The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated r

A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attac

A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unau

A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote

A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthentic

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, re

A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underl

A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticat

A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged (l

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote a

A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, re

A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthentic

A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches cou

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 9

A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could all

A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software an

A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that

A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make u

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensiti

A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthent

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Softw

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Softw

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Softw

A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE sof

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged u

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local ac

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privile

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially

Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client se

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, in

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalati

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevat

Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of priv

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of