2019

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier v

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-si

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not pu

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This

Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. Th

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user t

An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in

Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70

Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a pr

Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,

Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10

Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versio

Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may a

Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before ve

Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45

Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may a

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login i

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.

Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside o

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Ses

A Path traversal exists in http_server which allows an attacker to read arbitrary system files.

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a syml

An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which would allow a blocked user

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacke

A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands

Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vul

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exp

Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external

An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over

An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin

An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote atta

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a malici

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pro

An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, m

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious applica

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is