2019

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation could

IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when

TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login)

An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for l

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted req

A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web

A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query

A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary w

A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges v

Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserializatio

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketpla

The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TI

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO

To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS

An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certa

Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date,

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.

An error in zone database reference counting can lead to an assertion failure if a server which is running an affected v

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcod

A malicious client which is allowed to send very large amounts of traffic (billions of packets) to a DHCP server can eve

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-a

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool o

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSI

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSI

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalatio

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition wh

named contains a feature which allows operators to issue commands to a running server by communicating with the server p

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resourc

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and te

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an incons

An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th