2019

An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_d

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly res

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot

In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a

In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to

In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input valid

Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.

sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.

An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creatio

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informati

An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'Di

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hy

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to s

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sa

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce f

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to proper

The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images

Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jen

Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from t

The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for indivi

Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Micr

IBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user credentials in plain in clear text which can be read by a l

Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenki

Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where

Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where t

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuratio

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the unco

In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to local info

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of pr

In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disc

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local informat

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Bluetooth, there is a use of uninitialized variable. This could lead to local information disclosure with no addition

In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. This could lea

In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local den

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information d