2019

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported v

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 1

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filter

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filter

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). Suppor

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Applica

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). The supp

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponen

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applicatio

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applicatio

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati

headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin throu

The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.

Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which c

Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Js

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can

If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack a

Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before b

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the b

When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bou

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such a

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirem

When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages o

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow

A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when pro

Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download

A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized

LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: functio

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_Obj

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lex

HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: C

WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?fin

Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet.

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CW

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are a

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an atta

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware vers

A command injection (missing input validation) issue in the IP address field for the logging server in the configuration

The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow executio

Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdrago