2019

A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allo

Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 ma

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a

In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by `adb root` c

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.

Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: Java). The supported v

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 al

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style th

Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attack

Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and ea

cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=fal

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrat

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption o

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption ope

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric

On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file

A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical ac

In libhidcommand_jni, there is a possible out of bounds write due to a missing bounds check. This could lead to local es

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privil

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update clien

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folde

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions tha

Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involv

The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of

In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environme

An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. T

An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by chang

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerabi

The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker t

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named omamock that is vulnerable to

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dri

In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the driv