2019

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via t

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms coun

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parame

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locall

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,

An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle p

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle p

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W

An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Cont

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka

A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Se

An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, a

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Win

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of th

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticate

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time

An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerab

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user&a=doGetUserInfo id par

An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchPa

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it

NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software perform

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource tem

Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the use

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF c

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory m

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory m

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially craft

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in