2019

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Micros

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-p

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files,

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permission

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerab

An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege,

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its l

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a

An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor r

A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary f

GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to

jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 Proce

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impac

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function

Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part

There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v2

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire data

On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). T

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_crea

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/prod

OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, bu

HexoEditor v1.1.8-beta is affected by: XSS to code execution.

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The compon

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on th

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validat

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0,

Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allo

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or

A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Pow

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for th

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can

Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 ma

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file i

IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to

IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtai

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash

Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, wh

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter

A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cau

IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used t