CVE-2019-9490

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials. An attacker must be an authenticated user in order to exploit the vulnerability...

CVE-2019-9490

CVE-2019-9490 concerns Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2. The connected sources describe an information-disclosure vulnerability in the web console component that can be exploited by an authenticated remote attacker to disclose the web console administrator’s cr...

CVE-2018-9490

The CVE-2018-9490 issue affects Android, specifically the CollectValuesOrEntriesImpl function in elements.cc. The root cause is a type confusion that can enable remote code execution, leading to remote escalation of privilege. The vulnerability is exploitable with user interaction and has a local...

CVE-2016-9490

CVE-2016-9490 affects ManageEngine Applications Manager versions 12 and 13 prior to build 13200. It is a reflected XSS in the LIMIT parameter of /DiagAlertAction.do?REQTYPE=AJAX&LIMIT=1233, with the URL accessible without authentication. Root cause: insufficient input sanitization in the web UI h...

ManageEngine Applications Manager < 13200 Multiple Vulnerabilities

ManageEngine Applications Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9490

The raven-ruby gem prior to 0.12.2 contains a vulnerability in lib/raven/okjson.rb where the numtok function can be triggered by large exponents in scientific numbers, enabling remote DoS. Impact is a denial of service as described in multiple advisories (e.g., GHSA-C9C5-9FPR-M882). A fix is avai...