2019

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.

An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitL

Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.

Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.

BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon

An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where t

An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.ph

An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queri

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.

main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a

An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/dev

An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the includ

The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.

An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and

An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy.

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishand

framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file fro

In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File D

CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticket

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Ba

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.

IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.

Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number o

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local es

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared

In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds ch

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata page

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The e

libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default install

An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI

NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12,

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation

In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overf

In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to

In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due

In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bou

In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect o