PYSEC-2019-241

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...

CVE-2019-17452

Bento4 1.5.1.0 has a NULL pointer dereference in AP4DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump...

CVE-2019-17262

XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0...

CVE-2019-3738

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key...

CVE-2016-10946

The wp-d3 plugin before 2.4.1 for WordPress has CSRF...

The vulnerability of the OpenSSL library, related to errors in the certificate validation process, allows attackers to compromise the integrity of data.

The vulnerability of the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

UBUNTU-CVE-2019-15946

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-9932

Various Lexmark products have a Buffer Overflow issue 2 of 3...

CVE-2019-9930

Various Lexmark products have an Integer Overflow...

CVE-2019-15559

DianoxDragon Hawn before 2019-07-10 allows SQL injection...

CVE-2017-18578

The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...

CVE-2019-11603

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root...

CVE-2016-10882

The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...

PT-2019-7833 · Php · Php Jose Library

Name of the Vulnerable Software and Affected Versions: PHP JOSE Library versions prior to 2.2.1 Description: The issue allows for key confusion/algorithm substitution in the JWS component, resulting in the bypassing of signature verification via crafted tokens. Recommendations: For versions prior...

ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

libopenmpt Input Validation Error Vulnerability (CNVD-2020-22391)

libopenmpt is a cross-platform C and C++ based audio library that decodes audio files into raw PCM audio streams. An input validation error vulnerability exists in libopenmpt. No details of the vulnerability are available at this time...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

GNU Binutils libiberty Input Validation Error Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives...

Arbitrary Code Execution

constantinople is vulnerable to Arbitrary Code Execution. The library uses Function to evaluate the code expression, allowing an attacker to attempt a sandbox bypass which can lead to arbitrary code execution...