2019

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a pat

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0]

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path pa

tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[

tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via pat

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path p

Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which al

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/a

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows re

In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could le

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This co

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an in

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through d

Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication usin

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtai

The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durati

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blo

In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stac

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T

Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to t

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perfo

When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in t

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to c

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft E

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft