2019

In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a craft

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution

Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-pri

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privi

An issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't validate a certain size value,

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation direc

Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folde

An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an att

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system se

Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure per

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not pe

Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vuln

Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Succes

Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Succes

Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exp

Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful e

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An at

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a deni

A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a

Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciou

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may tr

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may tr

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result,

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the

parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The

An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gf

An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in