2019

A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat De

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). Suppor

It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extrac

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5),

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSys

A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote at

A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker t

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to displa

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RT

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cre

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Softwa

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Softwa

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ins

A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality in Cisco Aironet Acc

Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remot

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M5

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a sy

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated mal

Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a con

A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text whe

SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A speciall

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3

IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET r

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messa

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing lic

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overfl

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overfl

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer ov

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer ov

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain fu

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the pr

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the pr

EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing

EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full ac

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscr

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk m

eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full acce

IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds

In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is pa

On BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a stored cross

A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticat

In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build"