2019

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerabi

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox e

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whic

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow at

In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstr

ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on t

When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and s

Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9

Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM961

Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile

Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys dri

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinat

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windo

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privil

Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3

An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler fram

An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in

An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in Artifac

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in Sona

Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain pri

Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measu

Untrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows an attacker to gain pri

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windo

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.

Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may all

Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated use