2019

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5

Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati

Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updatePr

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is refl

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board titl

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head conten

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" p

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parame

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title conte

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal imag

A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, al

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fil

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that th

A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1

When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domai

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering pa

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on

A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and le

A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a kn

The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks. This default

A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user a

A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page nav

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently

If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed

A custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when i

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by `adb root` c

Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session coo

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificat

GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsign

Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information disclosure. The component

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component i

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to

In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to ca

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invok

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in clea

The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), wh

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwo

Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1,

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading t

Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored XSS (or Pe

Frog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert pop-up on page, Redirecti

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Acce

Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure i