2019

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which al

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/a

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows re

In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could le

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This co

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an in

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through d

Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication usin

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtai

The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durati

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blo

In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stac

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T

Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to t

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perfo

When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in t

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to c

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT

In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service (

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which all

The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash

The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers

The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many si