2019

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attemp

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtraction

The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py.

The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.

The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.

OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.

idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax_levels.

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php.

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.

DianoxDragon Hawn before 2019-07-10 allows SQL injection.

The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.

FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnes

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, a

An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption be

An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor misha

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mis

cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization o

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php.

An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows beca

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection vulnerability. Successful

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful ex

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exp

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successf

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exp

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successf

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successf

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successf

Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to ex

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has defau

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

The link-log plugin before 2.1 for WordPress has SQL injection.

The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.

The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.

The rsvpmaker plugin before 6.2 for WordPress has SQL injection.