CVE-2019-11340

util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowedlocal3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parseaddr call on...

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

Code injection

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

Out-of-bounds

Rockwell Automation RSLinx Enterprise Software LogReceiver.exe CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “Total Record Size” field. By sending a datagram...

CVE-2019-9483

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door...

CVE-2019-8418

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2019-8418

CVE-2019-8418 affects SeaCMS 7.2 and is triggered by mishandling requests to member.php?mod=repsw4. The NVD record lists CVSS v3 as 8.8 (HIGH) with network attack, low complexity, and privileges required as LOW; impacts are HIGH for confidentiality, integrity, and availability. The description al...

Design/Logic Flaw

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash Segmentation fault or possibly have unspecified other impact...

CVE-2019-6438

CVE-2019-6438 is a Slurm vulnerability affecting 32-bit systems with Slurm 17.11.x and 18.x prior to 18.08.5, where 32-bit handling is mishandled. Connected advisories (USN-4781-1/2, SUSE/SLE, openVAS) confirm this CVE as part of multiple Slurm issues and document mitigations via updates to 18.08...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

Design/Logic Flaw

commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P...

CVE-2018-20683

Gitolite before 3.6.11 has a vulnerability in commands/rsync where enabling rsync via .gitolite.rc mishandles the rsync command line, allowing an attacker to trigger an option other than -v, -n, -q, or -P. Affected product is Gitolite; root cause is improper handling of rsync options when rsync i...

CVE-2018-17848

CVE-2018-17848 affects Go’s html package (x/net/html); the vulnerability is a denial of service via a panic: runtime error (index out of range) in insertionModeStack.pop called from inHeadIM during html.Parse when encountering specific tags like . The initial description notes the parser mishandl...

CVE-2018-17182

An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain thread creation, map, unmap, invalidation, and dereference operations...

CVE-2018-17142

CVE-2018-17142: Golang Go html package vulnerability (html.Parse) causing a runtime panic due to invalid memory address. Public records show IBM bulletins listing this CVE within IBM Storage Defender – Data Protect and related IBM products, with remediation involving upgrading to a newer fixed re...

CVE-2018-17143

CVE-2018-17143 affects the Go html parser (x/net/html). The vulnerability arises from how the html package handles a crafted input fragment , which can cause a panic: runtime error in inBodyIM during an html.Parse call. The description and related advisories (GHSA/GITLAB entries) confirm the issu...

CVE-2018-16962

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...

CVE-2018-14356

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID...

CVE-2018-14351

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size...