2019

sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.

GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.

MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.

An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for

Sakai through 12.6 allows XSS via a chat user name.

Gophish through 0.8.0 allows XSS via a username.

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exac

The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.

The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwor

An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary f

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.

Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admi

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admi

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by se

core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users A

An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nl

In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information d

In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This co

In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to

In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This

In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This

In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. T

In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition

In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds ch

In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing boun

In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. T

In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could le

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This co

In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This cou

In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to

In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This c

In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of p

In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lea

In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use a

In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation

In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This coul

In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper loc

In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-

In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing boun

In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This coul

Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.

iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.