2019

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote at

Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, S

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with

Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This

Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon

Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon

Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).

Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDoc

Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.

An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that sign

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user wit

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary

In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBo

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute va

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypas

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it inc

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly r

HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy

ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and c

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements wit

NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in th

WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers t

An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Bl

letodms 3.3.6 has CSRF via change password

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation priv

An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their ch

An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows att

SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Script

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An atta

Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remo

Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to po

Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticat

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potenti

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may al

A cross-site request forgery (CSRF) vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote at

On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when r

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5

Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server becaus