2019

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restriction

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restriction

In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed wi

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of

In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multipl

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for

In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic e

In iOS before 11.2, a type confusion issue was addressed with improved memory handling.

In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addre

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was a

In iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed through improved memory h

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade is

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation i

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authenti

An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory/lib_memory.c have memory le

An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereferenc

An issue has been found in libIEC61850 v1.3.1. Ethernet_setProtocolFilter in hal/ethernet/linux/ethernet_linux.c has a S

An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called fr

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauth

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CP

A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote at

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and

An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStrea

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element,

Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. Thi

png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has st

The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be use

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended ac

A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker t

Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user,

Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.

Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the atta

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ES

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filenam

In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the s

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execu

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation o

Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated use

Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may all

Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.

Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileg

Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a priv

Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potenti

A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remo

In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.