1949 matches found
CVE-2019-1020014
docker-credential-helpers before 0.6.3 has a double free in the List functions...
Authorization Bypass
powershell is vulnerable to authorization bypass. An attacker is able to bypass Device Guard due to a flaw in the security feature...
PYSEC-2019-164
aubio v0.4.0 to v0.4.8 has a newaubioonset NULL pointer dereference...
CVE-2019-12046
LemonLDAP::NG -2.0.3 has Incorrect Access Control...
Arbitrary Command Execution
setroubleshoot is vulnerable to arbitrary command execution. The vulnerability exists through the fixlookupid function...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists similarly to Server : InnoDB...
Authorization Bypass
kernel-rt is vulnerable to authorization bypass. The vulnerability exists in the netctlpermissions function where uid and gid values can be used to perform authorization bypass...
CVE-2019-9621
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component...
CVE-2019-9796
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...
CVE-2019-11371
BWA aka Burrow-Wheeler Aligner 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bnsfasta2bntseq and bnsdump at btnseq.c...
Improper Access Control
unboundid-ldapsdk is vulnerable to improper access control. The vulnerability exists due to the lack of check for password in the synchronous process operation found in SimpleBindRequest...
CVE-2015-9274
HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service invalid read of two bytes and application crash because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh...
CVE-2018-19214
Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...
CVE-2018-18456
The function Object::isName in Object.h called from Gfx::opSetFillColorN in Xpdf 4.00 allows remote attackers to cause a denial of service stack-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-17590
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
CVE-2018-17591
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...
PYSEC-2018-133
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...
Arbitrary Command Execution
topydo is vulnerable to arbitrary command execution attacks. The library does not sanitize any of the TODO texts that are passed to the command line, allowing a malicious user to pass arbitrary bytes to the command line by prepending the bytes with the \ character...
MGASA-2018-0285 Updated imagemagick packages fix security vulnerability
Imagemagick has been updated to version 6.9.10.0 to fix several bugs and possible security issues. - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts - Missing break when checking "compliance" element. - Fixed errant 'not enough pixel data' - Fixed memor...