2019

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguratio

An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to con

The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the devic

Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This allows any hosted file on an

In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. Thi

An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges).

An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1

An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1

In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be u

Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Lib

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remot

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keyst

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002 is prone to keystroke i

Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the serv

In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were t

In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. This

In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a

In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to loc

In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race co

In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This

In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to

In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a

In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass d

In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fil

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run script

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run script

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run script

An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that

An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administ

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execu

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insec

The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecif

aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.

aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.

admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0

Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of appl

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker