2019

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an a

A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defens

A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, re

A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remo

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in Je

Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory,

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attack

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management cras

CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to exec

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, ver

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file.

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file

IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used t

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attacke

IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect at

IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to bru

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Valida

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Moja

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by a

SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.

SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.

An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The c

Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights a

Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for

Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by po

Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable

Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tp

JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality

An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially

Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the soc

A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected b

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is ena

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is ena

An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https con

JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog

In Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long running computation bec

An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP hea

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.

The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vim_settings.xml file. Th

In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no p

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox brow

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site