2019

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sho

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of secur

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed ev

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted conten

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBI

An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() l

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2S

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstr

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.1

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safa

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, w

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, S

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, S

PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol G

Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized ac

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafte

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command inject

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to che

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handl

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handl

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and

An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with '<#assi

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and

JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A

Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user wit

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Communit

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.

zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.

/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar

Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.

njiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitr

Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate