2019

A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed t

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers

In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB devi

In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the driv

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the syst

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the atta

IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging

Review Board: URL processing gives unauthorized users access to review lists

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

SaltStack RSA Key Generation allows remote users to decrypt communications

webauth before 4.6.1 has authentication credential disclosure

OpenShift cartridge allows remote URL retrieval

Katello has multiple XSS issues in various entities

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthent

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthentic

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a pa

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the

Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to ve

A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text whe

Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a con

ReviewBoard: has an access-control problem in REST API

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges

piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)

piwigo has XSS in password.php

mom creates world-writable pid files in /var/run

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes ca

An issue was discovered in TitanHQ WebTitan before 5.18. It has a hidden support account (with a hard-coded password) in

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an atta

An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfi

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during install

An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration i

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) all