2019

A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows

A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel throug

A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users

tog-Pegasus has a package hash collision DoS vulnerability

Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototy

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI.

Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers t

contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x be

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Prem

trytond 2.4: ModelView.button fails to validate authorization

pam_shield before 0.9.4: Default configuration does not perform protective action

mono 2.10.x ASP.NET Web Form Hash collision DoS

xlockmore before 5.43 'dclock' security bypass vulnerability

rc before 1.7.1-5 insecurely creates temporary files.

Gamera before 3.4.1 insecurely creates temporary files.

While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Au

An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal tech

Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive informat

The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2)

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached b

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCha

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname.

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.

wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication.

An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4

nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences

PyXML: Hash table collisions CPU usage Denial of Service

An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If i

W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of d

W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download th

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x ver

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching

gnome-system-log polkit policy allows arbitrary files on the system to be read

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_ma

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and a

Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAG_MISUSE vulnerability that coul