2019

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a53

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which

TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially re

TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result cod

Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly

Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not bei

All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited usin

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL execu

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing pas

Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when f

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component

A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2

Hadoop 1.0.3 contains a symlink vulnerability.

Bitlbee does not drop extra group privileges correctly in unix.c

mediawiki allows deleted text to be exposed

gpw generates shorter passwords than required

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, au

Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acqui

qtparted has insecure library loading which may allow arbitrary code execution

paxtest handles temporary files insecurely

ytnef has directory traversal

asterisk allows calls on prohibited networks

IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially cra

After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges th

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could a

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource tha

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The info

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to o

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be rea

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which co

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5

Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from

Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vul

An XML External Entity Injection vulnerability exists in Dzone AnswerHub.

A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET o

A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows

Python keyring lib before 0.10 created keyring files with world-readable permissions.

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Bac

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Bac

VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and

A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed

The web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH) is vulnerable to a