2019

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc,

In Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long running computation bec

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9

An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) i

An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) i

IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80.

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before ve

SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited cou

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with

An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the ope

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, ak

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memo

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec

An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memo

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This cou

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and

In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a miss

In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching o

In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This co

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalPr

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a spe

A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operat

mailscanner can allow local users to prevent virus signatures from being updated

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be rea

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to o

paxtest handles temporary files insecurely

A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2

All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited usin

xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes J

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (applicatio

The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowi

evince is missing a check on number of pages which can lead to a segmentation fault

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary fi

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.

CloudForms stores user passwords in recoverable format

RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates

Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could

In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/plat

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensi

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Sn