CVE-2019-7289

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user may be able to view senstive user information...

CVE-2019-7289

The CVE-2019-7289 issue affects Apple Shortcuts for iOS: a parsing flaw in how directory paths are handled could allow a local user to view sensitive information. The root cause is improper path validation. Remediation is available in Shortcuts 2.1.3 for iOS, which addresses the vulnerability by ...

SCEditor Cross-Site Scripting Vulnerability

SCEditor is a WYSIWYG editor. A cross-site scripting vulnerability exists in SCEditor version 2.1.3, which stems from the lack of proper validation of client-side data in a WEB application and can be exploited by an attacker to execute client-side code...

CVE-2019-19466

SCEditor 2.1.3 allows XSS...

CVE-2019-19466

SCEditor 2.1.3 allows XSS...

Cross site scripting

SCEditor 2.1.3 allows XSS...

CVE-2019-19466

SCEditor 2.1.3 allows XSS...

Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1

Nov. 9, 2019 Andrey Cherepanov 68.2.2-alt1 - New version 68.2.2. - Fixed: + CVE-2019-15903 Heap overflow in expat library in XMLGetCurrentLineNumber + CVE-2019-11757 Use-after-free when creating index updates in IndexedDB + CVE-2019-11758 Potentially exploitable crash due to 360 Total Security +...

Red Hat Update Infrastructure Information Disclosure Vulnerability

Red Hat Update Infrastructure is a Red Hat solution for managing the contents of yum repositories in the Red Hat Enterprise Linux cloud. An information disclosure vulnerability exists in Red Hat Update Infrastructure version 2.1.3. The vulnerability, which arises from a configuration or other err...

CloudBees Jenkins Dynatrace Application Monitoring Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dynatrace Application Monitoring Plugin is us...

PT-2019-11856 · Jenkins · Jenkins Dynatrace Application Monitoring Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dynatrace Application Monitoring Plugin versions 2.1.3 and earlier Jenkins Dynatrace Application Monitoring Plugin versions prior to 2.1.4 Description: A cross-site request forgery issue allows attackers to connect to an...

Cross site scripting

Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting XSS - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3...

CVE-2019-9039

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "alldocs" endpoint. By issuing nested queri...

Design/Logic Flaw

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "alldocs" endpoint. By issuing nested queri...

CVE-2019-9039

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "alldocs" endpoint. By issuing nested queri...

TheHive Project Cortex 2.1.3 Server Side Request Forgery

Exploit Title: SSRF in TheHive Project Cortex = 2.1.3 Date: 2/26/2019 Exploit Author: Alexandre Basquin Vendor Homepage: https://blog.thehive-project.org Software Link: https://github.com/TheHive-Project/Cortex Version: Cortex = 2.1.3 Tested on: 2.1.3 CVE : CVE-2019-7652 Exploit description TheHi...

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

CVE-2017-16775

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Apache Hbase Authorization Bypass Vulnerability

Apache Hbase is the United States Apache Apache Software Foundation, a set of column-oriented distributed database built on Apache Hadoop and Apache ZooKeeper. The database is suitable for unstructured data storage. A security vulnerability exists in Apache Hbase versions 2.0.0 through 2.0.4 and...

About the security content of Shortcuts 2.1.3 for iOS - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...