2019

Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially ena

Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to po

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between t

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesy

Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may a

Improper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an auth

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary loc

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with ver

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID

eDeploy has tmp file race condition flaws

jersey: XXE via parameter entities not disabled by the jersey SAX parser

Huawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability. Due to improper configuration, the a

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.

samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.

Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run a

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain c

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetai

The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email)

ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 fi

ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65 file.

ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file.

Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability.

CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets.

There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. A

duplicity 0.6.24 has improper verification of SSL certificates

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution

VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.

An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an int

An issue was discovered in the SAML Single Sign On (SSO) plugin for several Atlassian products affecting versions 3.1.0

qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descrip

CFME: CSRF protection vulnerability via permissive check of the referrer header

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read i

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing glob

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3

An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Softw

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash p

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (whic

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace

The Bitwarden server through 1.32.0 has a potentially unwanted KDF.

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (C

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network acces