2019

Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker

Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform ar

Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to ca

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the impro

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when cons

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.

QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the h

In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Applicat

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vec

Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attac

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine serv

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain stru

An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).

An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via

An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting

do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corrupt

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a di

do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_

Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to poten

Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privilege

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to p

Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to

Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to p

Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privil

Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a pri

Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may

Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an

Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an a

Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an

Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to poten

Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windo

Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated

index.js in Total.js Platform before 3.2.3 allows path traversal.

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to r

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the publi

imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.

JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.

ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated b

daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the

includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.