2019

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messa

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper a

An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locat

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 E

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShel

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memo

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerabi

AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection.

An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an inc

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly vali

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly vali

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. Th

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a

ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and c

A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read inter

Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (

Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with .

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnera

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary

OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Wind

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions

atop: symlink attack possible due to insecure tempfile handling

Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related

In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opport

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0

Python Twisted 14.0 trustRoot is not respected in HTTP client

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy

Pacemaker before 1.1.6 configure script creates temporary files insecurely