2019

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker t

A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could

ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifie

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This

MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-

The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many si

The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers

The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which all

Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can es

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.

BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attack

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service (

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in sam

There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.0

There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a c

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra

In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back

Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2

HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and o

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT

An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, al

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker w

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka '

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To explo

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m