2019

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 20

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserializatio

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query). Suppo

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Manag

MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.

MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A misha

MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting

URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomple

An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read be

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read

Zemana AntiMalware before 3.0.658 Beta mishandles update logic.

examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.

The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 co

The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take f

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting t

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwar

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with

In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwan

In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:

CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the

Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.

Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data

IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be autom

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.

An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library i

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permiss

In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.

In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with impr

In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of

In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multipl

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic e

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execu

In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lo

Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.

PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative pri

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2

RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with R