2019

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local att

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local att

An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated

An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlin

In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect

On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k

In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This coul

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This co

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could le

In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds ch

In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This

In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proce

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proce

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attack

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbo

In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information di

IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker

Multiple vulnerabilities in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authentica

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, loca

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of

An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which an input index value is

Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Co

Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (

A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the L

Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.

A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.

IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directo

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing i

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an au

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5, vCMP hyperviso

In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free b

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a

SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive informati

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a

Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R)

Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 1

Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12

Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_So