2019

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failur

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP sock

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Deni

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and confi

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when proces

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix

On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may cra

An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Ju

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to cra

A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not require

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be sus

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource tem

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticate

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of th

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/u

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remot

A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensi

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sen

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attac

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens

The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive in

The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sen

The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.

D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a

send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulner