2019

hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which a

udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by

In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to

In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This

index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.

XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/in

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a sy

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows att

poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribut

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request all

Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 prot

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. T

In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lea

In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to l

In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information

In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 J

In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks.

In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free.

In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. Thi

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing b

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to loc

In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure w

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure defaul

In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additiona

In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input valid

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device

In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application

An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their ch

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corru

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation priv

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insuffici

An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at We

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle at

letodms 3.3.6 has CSRF via change password

Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.