2019

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.

etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-b

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data

IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be autom

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it

A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirect

A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_de

An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/inde

CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.

A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demo

An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflo

An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library i

An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_a

Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject a

An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL stat

Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large intege

Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote atta

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discover

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon '

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve

In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling.

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permiss

In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befor

In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6,

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befor

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with impr

In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improv

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes befo

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes befo

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes befo

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes befo

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes befo

In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS Hig

In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El

In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. Thi

In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosur

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.