2019

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman,

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a lar

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daem

In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd pr

An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byt

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.505

Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15

Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.505

In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.

It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of

An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improp

An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a va

SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user de

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c negl

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc f

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Brese

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComp

An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Brese

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the

It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A speciall

It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2

FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image fil

FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image fil

FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a v

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d v

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 v

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local ac

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an at

The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote at

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, vers

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to mac

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of

A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. Thi