2019

SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator author

yard before 0.9.20 allows path traversal.

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a cas

An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm

EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte.

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (b

canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Strea

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer"

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Imp

A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch fil

An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relyin

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attack

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with [email protected] followed by <

An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-afte

An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error wi

In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE bef

In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE bef

In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE bef

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to wr

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory struc

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This al

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly o

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation.

Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Com

Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, S

Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT,

Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Sn

When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go throu

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdr

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute,

An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon

Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Sn

Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer

Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdr

An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapd

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto,