2019

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user.

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerabili

Symantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Ed

Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE), prior to versions 14.2

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a mali

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerabilit

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.

cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file t

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privi

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled

A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow lo

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow

A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/stati

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve t

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firm

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate se

Low privilege users can access service configuration which contains registry data that admins uses to create or delete e

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall A

Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was p

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially caus

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon A

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Cons

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non sec

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Au

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pro

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due t

Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual ma

Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlle

IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escala

plow has local buffer overflow vulnerability

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operatio

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marve

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation

The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially ex

vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scr

A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly