2019

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syn

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recove

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins ma

Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in S

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An appli

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malici

This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious applic

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4. An encrypted vo

This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. A malic

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2, macOS Mojave 10.14.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.5. A malicious application may

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An appli

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An appli

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An appli

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may b

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13.

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved

The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious applic

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T

A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improve

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macO

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2,

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.1. An app

Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a serv

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readab

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows atta

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer thro

Huawei OceanStor SNS3096 V100R002C01 have an information disclosure vulnerability. Attackers with low privilege can expl

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions

A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.pat

A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.

A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability cause

An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted M

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, r

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when

An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial o