2019

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible

minidlna has SQL Injection that may allow retrieval of arbitrary files

MiniUPnPd has information disclosure use of snprintf()

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vuln

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive dat

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. It is possible to obta

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/servl

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Docum

An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linu

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6

Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parame

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper valida

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the

FreeTDS through 1.1.11 has a Buffer Overflow.

An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wire

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lie

An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware

An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor

Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken th

Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.

A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value

Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisone

Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash)

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary fi

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can

An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially

An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticat

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Comm

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current

A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attacke

ruby193 uses an insecure LD_LIBRARY_PATH setting.

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 a

A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other

On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each

Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translat

In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in w