2019

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset on

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical addre

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as So

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encr

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile device

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 discloses sensitive information to unauthorized users. The

A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache load

IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previou

Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker wi

An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as

IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local

The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to ob

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that

Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom.

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive d

Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for bro

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware (subcomponent: ODI Tools). Supported v

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: File Locking Services)

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for

In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consu

All versions of unity-scope-gdrive logs search terms to syslog.

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affec

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive i

Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable i

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x befo

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x befo

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x befo

The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache

The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass A

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient prot

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticat

A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected vers

This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with im

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.

This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.