2019

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapd

While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorr

Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera sessi

An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigg

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of vi

Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/syste

In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after fr

In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This cou

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies th

A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks poin

GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the ins

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malic

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer

A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorr

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.3). The vulnerability could allow an attack

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by t

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal servi

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary com

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microso

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microso

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microso

Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substr

MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shar

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Erro

An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Wind

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,

An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbol

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-61

Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier ma

Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.