2019

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19

XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated at

An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.10465

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adap

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer s

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer s

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restri

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive infor

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerabili

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a lo

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.

The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow paramete

SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not

SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appServic

While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if

Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdr

Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialize

Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdrag

IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which c

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorizati

An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c

An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating th

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arb

A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala

Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable

Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of

Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation

Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable

Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala

Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially

Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable

Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Service

SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitima

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40,

Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not s

Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as w