2019

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2).. The encryption key

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Bu

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recove

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syn

_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDest

A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.

Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS

In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is in

Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of priv

Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privile

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation o

Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial es

Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may all

Improper conditions check in the Linux kernel driver for the Intel(R) FPGA SDK for OpenCL(TM) Pro Edition before version

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially en

Insufficient memory protection for Intel(R) Ethernet I218 Adapter driver for Windows* 10 before version 24.1 may allow a

On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button fir

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (pr

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code ex

IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by chan

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomple

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker ca

An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploa

imagemagick 6.8.9.6 has remote DOS via infinite loop

ZF2014-03 has a potential cross site scripting vector in multiple view helpers

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration

read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusIns

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input va

E5572-855 with versions earlier than 8.0.1.3(H335SP1C233) has an improper authentication vulnerability. The device does

The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications

The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable t