2019

There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatu

A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes

A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames an

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou

The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value

Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used

Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.

A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-L

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable init

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a clie

An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL

A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote

A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow

A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow co

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injecti

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and ex

A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute ar

A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, r

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an u

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center

A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary comma

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could all

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could

OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string le

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with dee

A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthen

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an au

A vulnerability in the Webex Network Recording Admin page of Cisco Webex Meetings could allow an authenticated, remote a

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM)

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could a

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco R

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticat

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an a

Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwa

Tahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some cases.

A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the managem

A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration con

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This

In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable

In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, th

A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to ru

Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query pa