PT-2019-7486 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

VMware Harbor 1.8.x < 1.8.4 (VMSA-2019-0016)

The version of VMware Harbor installed on the remote host is 1.8.x prior to 1.8.4. It is, therefore, affected by a broken access control vulnerability due to a failure to enforce proper project permissions and project scope on the API request to create a new robot account. This vulnerability allo...

Red Hat CoreOS Tectonic Cross-Site Scripting Vulnerability

Red Hat CoreOS Tectonic is an open source, automated enterprise Kubernetes platform from Red Hat. The platform is mainly used to automate the execution of operational tasks to achieve platform portability and multi-cluster management. A cross-site scripting vulnerability exists in Red Hat CoreOS...

CVE-2016-10954

The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...

PT-2019-7747 · WordPress · Neosense Theme

Name of the Vulnerable Software and Affected Versions: Neosense theme versions prior to 1.8 for WordPress Description: The issue concerns an unrestricted file upload in the qquploader component of the Neosense theme. This allows for potential security risks due to the lack of restrictions on file...

PT-2019-11777 · Jenkins · Jenkins Codefresh Integration Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Codefresh Integration Plugin versions 1.8 and earlier Description: The issue concerns the Jenkins Codefresh Integration Plugin, which unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. This...

Code Execution Vulnerability in SDCMS V1.8

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A code execution vulnerability exists in SDCMS V1.8, which can be exploited by an attacker to gain server privileges...

Logic Flaw Vulnerability in sdcms V1.8

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A logic flaw vulnerability exists in sdcms V1.8, which can be exploited by attackers to obtain sensitive information...

Fedora Update for bouncycastle FEDORA-2019-df57551f6d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GNU recutils null pointer dereference vulnerability (CNVD-2019-22405)

GNU Recutils is a set of tools and libraries for accessing human-editable plain text databases called recfiles. A null pointer dereference vulnerability exists in the recrsetgetprops function in rec-rset.c in librec.a in GNU recutils 1.8. An attacker can exploit this vulnerability to cause a deni...

Kubernetes 1.3.x < 1.7.14 / 1.8.x < 1.8.9 / 1.9.x < 1.9.4 multiple vulnerabilities

The version of Kubernetes installed on the remote host is version 1.3.x prior to 1.7.14, 1.8.x prior to 1.8.9 or 1.9.x prior to 1.9.4. It is, therefore, affected by multiple vulnerabilities. - An arbitrary file access vulnerability exists in containers using subpath volume mounts. An authenticate...

DEBIAN-CVE-2019-11637

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

UBUNTU-CVE-2019-11637

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

CVE-2019-11640

CVE-2019-11640 affects GNU Recutils 1.8 (notably 1.8.90 in some advisories). The issue is a heap-based buffer overflow in rec_fex_parse_str_simple (rec-fex.c) within librec.a. Impacted versions may crash or become unstable due to memory corruption. Several connected advisories confirm the vulnera...

CVE-2019-11637

GNU recutils 1.8 contains a NULL pointer dereference in rec_rset_get_props (rec-rset.c in librec.a), leading to crashes. This CVE-2019-11637 issue is described consistently across multiple feeds (NVD, OSV, CNVD, CNVD-China, and related Nessus/OpenVAS entries). Connected documents confirm the affe...

PT-2019-12442 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: An issue was discovered that leads to a crash due to a NULL pointer dereference in the function rec field name equal p at rec-field-name.c in librec.a. Recommendations: For GNU recutils version 1.8, at th...

PT-2019-12443 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: An issue was discovered in the function rec type check enum at rec-types.c in librec.a, which is a part of GNU recutils. This issue is a stack-based buffer overflow. Recommendations: For GNU recutils...

PT-2019-12444 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: A heap-based buffer overflow issue exists in the function rec fex parse str simple at rec-fex.c in librec.a. Recommendations: For GNU recutils version 1.8, consider applying a patch or fix to address the...

PT-2019-12441 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: An issue was discovered that leads to a crash due to a NULL pointer dereference in the function rec rset get props at rec-rset.c in librec.a. Recommendations: For GNU recutils version 1.8, consider avoidi...

Gitea Remote Code Execution Vulnerability (CNVD-2019-13568)

Gitea is an open source lightweight code hosting solution. A security vulnerability exists in the models/repomirror.go file in Gitea versions prior to 1.7.6 and 1.8.x prior to 1.8-RC3. A remote attacker could exploit this vulnerability to execute code...