2019

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permiss

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection v

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users

The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS

The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerabi

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox e

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whic

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow at

In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstr

ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on t

When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and s

Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9

Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM961

Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile

Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys dri

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinat

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windo

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privil

Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local

Untrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and Installer of INplc SDK Pro+ 3

An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler fram

An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in

An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in Artifac

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in Sona

Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain pri