2019

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker w

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker wh

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who succes

An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An a

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An a

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox e

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary loc

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An

An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request F

An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/ad

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to sta

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-au

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly vali

eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point f

eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and do

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote

It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacke

It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An a

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4A

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_Dec3Atom class at Core/Ap4D

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4_RtpAtom class at Core/Ap4Rtp

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4_BitReader::SkipBit

The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.

The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.

The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.

The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.

The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.