2019

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pro

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully ex

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Au

Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Au

While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Au

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.

Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snap

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non sec

SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdrag

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Cons

Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Sn

Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Sn

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values i

Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consume

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon A

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially caus

Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was p

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall A

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClo

Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attac

Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by t

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job

Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the J

Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files

Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions,

A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permis

A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default par

Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read se

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-comp

Low privilege users can access service configuration which contains registry data that admins uses to create or delete e

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate se

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firm

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iter

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon

Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapd

Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out

Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle wit

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve t

eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

python-rply before 0.7.4 insecurely creates temporary files.

Gamera before 3.4.1 insecurely creates temporary files.

rc before 1.7.1-5 insecurely creates temporary files.

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.

Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of se

xlockmore before 5.43 'dclock' security bypass vulnerability

cumin: At installation postgresql database user created without password