5023 matches found
August 16, 2019—KB4512494 (OS Build 16299.1365)
None None...
PT-2019-7283 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: easy-digital-downloads plugin versions prior to 2.3.3 Description: The issue is related to SQL injection in the easy-digital-downloads plugin for WordPress. Recommendations: For versions prior to 2.3.3, update to version 2.3.3 or later to...
Malicious Package
cage-js is a malicious package. It downloads and runs malicious code from remote server as postinstall script...
Malicious Package
next-util is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
midway-dataproxy is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
hsf-clients is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
cicada-render is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
diamond-clien is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
tiar is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
river-mock is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
secureidentityloginmodule is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
Malicious Package
qingting is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...
CVE-2019-9886
CVE-2019-9886 affects BroadLearning eClass up to version ip.2.5.10.2.1, where arbitrary files can be downloaded without authentication via URLs containing download_attachment.php under templates or home folders. Root cause/impact: unauthenticated access to sensitive files (no login required). Pub...
CVE-2018-20073
Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...
CVE-2019-6169
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
CVE-2019-6169
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
Design/Logic Flaw
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
CVE-2019-6169
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
CVE-2019-6169: Missing Encryption of Sensitive Data
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
PT-2019-18000 · Lenovo · Lenovo Service Bridge
Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow unencrypted downloads over FTP. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve th...