2019

A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacke

A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap

Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a san

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit hea

A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap c

A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remot

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in

Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a pers

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privil

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any o

A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Ch

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.

Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP clien

An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Re

Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to caus

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a differen

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* b

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* b

qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstr

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by cha

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was add

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c b

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication r

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors m

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windo