2019

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to

On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1-12.1.5, 11.6.4-11.6.5,

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, includ

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with emb

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlie

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13

A race condition existed when reading and writing user preferences. This was addressed with improved state handling. Thi

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup.

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pro

The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertentl

The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked ic

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access t

An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue i

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed

A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. T

An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issu

In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro).

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microso

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker

The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly m

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by rem

In affected versions of Sylius, exception messages from internal exceptions (like database exception) are wrapped by \Sy

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-cont

In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers

In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the syst

An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfi

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability.

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a l

A password generation weakness exists in xquest through 2016-06-13.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Sieme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Sieme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Sieme

An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 2 of

It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credent

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print

IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cookie

On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC envir

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linu

Symantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability w

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3

The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.O

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019

The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-k

The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys