2019

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized

In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and And

In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save r

Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information w

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed in

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead t

An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /de

Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated

Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an a

Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to p

Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to p

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administra

Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attacker

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_coun

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. I

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has a

drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has sev

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer o

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer o

Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues i

Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdra

Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute,

Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose contin

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connecti

Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a lo

In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEs

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in

In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due t

In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This cou

The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional e

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Moja

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An appl

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which make

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a vic

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclos

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To explo