CVE-2016-10772: Undefined Security Weakness

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin SEC-168...

CVE-2017-18397: Undefined Security Weakness

cPanel before 68.0.15 does not preserve permissions for local backup transport SEC-330...

CVE-2017-9327: Undefined Security Weakness

Secret data of processes managed by CM is not secured by file permissions...

CVE-2019-12454: Undefined Security Weakness

An issue was discovered in wcd9335codecenabledec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdupnul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability...

CVE-2019-12447: Undefined Security Weakness

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used...

CVE-2011-3145: Undefined Security Weakness

When mount.ecrpytfsprivate before version 87-0ubuntu1.2 calls setreuid it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfsprivate...

CVE-2018-11970: Undefined Security Weakness

TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / ...

CVE-2019-10844: Undefined Security Weakness

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

CVE-2019-10477: Undefined Security Weakness

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-3852: Undefined Security Weakness

A vulnerability was found in moodle before version 3.6.3. The getwithcapabilityjoin and getusersbycapability functions were not taking context freezing into account when checking user capabilities...

CVE-2019-5616: Undefined Security Weakness

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser...

CVE-2019-9573: Undefined Security Weakness

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9191: Undefined Security Weakness

The ETSI Enterprise Transport Security ETS, formerly known as eTLS protocol does not provide per-session forward secrecy...

CVE-2019-8418: Undefined Security Weakness

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2019-6438: Undefined Security Weakness

SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems...

CVE-2018-5915: Undefined Security Weakness

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...

CVE-2019-0249: Undefined Security Weakness

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

CVE-2018-18893: Undefined Security Weakness

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java...

CVE-2018-15335: Undefined Security Weakness

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...

CVE-2018-16396: Undefined Security Weakness

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats...