2019

Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_so

SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which cras

A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the

JBoss AeroGear has reflected XSS via the password field

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

Cryptocat before 2.0.22 has Remote Denial of Service via username

RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates

CloudForms stores user passwords in recoverable format

slim has NULL pointer dereference when using crypt() method from glibc 2.17

On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. The power consumption of each row-ba

On Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found. The power consumption of

On Archos Safe-T devices, a side channel for the row-based OLED display was found. The power consumption of each row-bas

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that

/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense on FreeBSD allows a use

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

The Log module in SECUDOS DOMOS before 5.6 allows XSS.

An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plu

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0

The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 m

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in

A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 b

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to

Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web scri

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.

cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary fi

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel c

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backe

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend.

Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTM

GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which coul

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuration

On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exis

There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attac

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of se

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class an

php-symfony2-Validator has loss of information during serialization

evince is missing a check on number of pages which can lead to a segmentation fault

MiniDLNA has heap-based buffer overflow

TWiki allows arbitrary shell command execution via the Include function

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inj