2019

The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI co

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when proces

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and confi

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Deni

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update clien

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1

A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attac

SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited cou

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making the

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffD

libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_locati

An XSS vulnerability in project list in OpenProject before 9.0.4 and 10.x before 10.0.2 allows remote attackers to injec

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP sock

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failur

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Cl

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespac

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable V

A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spect

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 20

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows

The animate-it plugin before 2.3.5 for WordPress has XSS.

The animate-it plugin before 2.3.4 for WordPress has XSS.

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 per

cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).

cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).

cPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters a

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get f

Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the to

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform action

On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowl

The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affe

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of al

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masqu

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, s