2019

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masqu

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of al

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affe

Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the to

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters a

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespac

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Cl

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failur

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP sock

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Deni

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and confi

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when proces

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix

On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may cra

An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Ju

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to cra

A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not require

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be sus

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource tem

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticate

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of th

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/u

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remot

A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensi

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sen

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attac

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens