SolarWinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2020-04012)

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

SolarWinds Orion Platform Cross-Site Scripting Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

drm graphics drivers -- Local privilege escalation and denial of service

Intel reports: As part of IPU 2019.2, INTEL-SA-00242 advises that insufficient access control may allow an authenticated user to potentially enable escalation of privilege via local access. INTEL-SA-00260 advises that insufficient access control may allow an authenticated user to potentially enab...

JetBrains IntelliJ IDEA Elevation of Privilege Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2019.2. An attacker can exploit the vulnerability to elevate privileges and potentially execute...

Unspecified Vulnerability in JetBrains IntelliJ IDEA

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2019.2. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2019-18361

JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution...

UBUNTU-CVE-2019-18361

JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...

CVE-2019-14954

JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection...

Design/Logic Flaw

JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection...

CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

Sql injection

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

UliCMS XSS Injection Vulnerability

UliCMS is an open source content management system. A cross-site scripting vulnerability exists in UliCMS versions 2019.2 and 2019.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-si...