2019

The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.

Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerabil

Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitat

parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to

EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the

An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in

An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewT

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result,

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events

HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwri

A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escala

A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to

Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwri

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forge

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may tr

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may tr

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciou

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attacke

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory a

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a mali

In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "default_dat

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which res

An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel w

An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker t

A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker t

A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a deni

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with m

wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPres

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insuffi

The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type

An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element (containing a user/card.php CSRF re

An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in th

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vul

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. A

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted pac

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An at

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who

This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates f