2019

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1

Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly op

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete

xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (a

An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the

An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only

A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'W

The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?actio

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration

On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowl

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 20

A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'W

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications

Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parame

On Archos Safe-T devices, a side channel for the row-based OLED display was found. The power consumption of each row-bas

On Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found. The power consumption of

On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. The power consumption of each row-ba

A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleyl

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerabilit

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel throu

A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the

IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to H

If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extra

A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and ds

Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrec

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the driv

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang

Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45