CWE-20

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firm

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firm

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker coul

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to

A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a m

An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of se

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and anot

The doPayouts() function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Ser

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading execu

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P)

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unaut

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V

An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does no

Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects ve

A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2.

This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authenticatio

Michael Roth Software Personal FTP Server (PFTP) through 8.4f allows remote attackers to cause a denial of service (daem

A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packet

An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the ope

PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface cha

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the

SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate

In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion patt

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messa

On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertio

When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught

In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc.

Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonS

An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's cod

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that c

Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkerne

An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cau

A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allow

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connectio

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path

Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.

Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light

python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request.

The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Objec

In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal whil

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP

Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input vali