UBUNTU-CVE-2019-19039

btrfsfreeextent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfsprintleaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as no...

Cisco Stealthwatch Enterprise CVE-2019-15994 Cross Site Scripting Vulnerability

Description Cisco Stealthwatch Enterprise is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Th...

PT-2019-5737 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.2.3 and below FortiAnalyzer versions 6.2.3 and below Description: The issue is related to the use of a hard-coded cryptographic key in the CLI configuration of FortiManager and FortiAnalyzer, which may allow an attacke...

FasterXML Jackson CVE-2019-10172 Multiple XML External Entity Injection Vulnerabilities

Description FasterXML Jackson is prone to multiple XML External Entity injection vulnerabilities. Attackers can exploit these issues to obtain potentially sensitive information or cause a denial-of-service condition. This may lead to further attacks. Technologies Affected FasterXML Jackson...

Moodle CVE-2019-14880 Security Bypass Vulnerability

Description Moodle is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Moodle 3.5.9, 3.6.7 and 3.7.3 are vulnerable. Technologies Affected Moodle...

Apache Shiro CVE-2019-12422 Information Disclosure Vulnerability

Description Apache Shiro is prone to an information-disclosure vulnerability. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Versions prior to Apache Shiro 1.4.2 are vulnerable. Technologies Affected Apache Apache Shiro...

CVE-2011-4972

hookfiledownload in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request...

CVE-2011-4972

CVE-2011-4972 affects CKEditor 7.x-1.4 for Drupal. The hook_file_download routine fails to properly restrict access to private files, enabling an attacker to read private files via a direct request. Affected product: CKEditor module (Drupal contrib) version 7.x-1.4. Root cause: improper access co...

PT-2019-4045 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver versions prior to 26.20.100.7209 Description: The issue is related to improper input validation in the API for the IntelR Graphics Driver, which may allow an authenticated user to potentially enable denial of service vi...

SAP NetWeaver AS Java CVE-2019-0391 Information Disclosure Vulnerability

Description SAP NetWeaver AS Java is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. SAP NetWeaver AS Java versions 7.10, 7.20, 7.30, 7.31, 7.4 and 7.5 are vulnerable. Technologies Affect...

PT-2021-5416

Name of the Vulnerable Software and Affected Versions roundcube versions prior to 1.3.17 roundcube versions 1.4.x prior to 1.4.12 Description The issue is related to roundcube, a skinnable AJAX based webmail solution for IMAP servers, which did not properly sanitize requests and mail messages. Th...

Medtronic Valleylab FT10 and FX8

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Medtronic Equipment: Valleylab FT10, Valleylab FX8 Vulnerabilities: Use of Hard-coded Credentials, Reversible One-way Hash, Improper Input Validation 2. RISK EVALUATION Successful exploitation of...

Multiple Veritas Products CVE-2019-18780 Arbitrary Command Injection Vulnerability

Description Multiple Veritas products are prone to an arbitrary command-injection vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary shell commands in the context of the affected application. Failed exploit attempts...

Joomla! Core CVE-2019-18674 Information Disclosure Vulnerability

Description Joomla! Core is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Joomla! Core versions 3.6.0 through 3.9.12 are vulnerable. Technologies Affected Joomla Joomla! 3.2 Joomla...

PHP 'FFI::cast()' Heap Based Memory Corruption Vulnerability

Description PHP is prone to a heap-based memory-corruption vulnerability. Successful exploits may allow the attacker to crash the affected application resulting in denial-of-service condition. Versions prior to PHP 7.4.0 are vulnerable. Technologies Affected PHP PHP 7.3.0 PHP PHP 7.3.1 PHP PHP...

[ASA-201910-16] firefox: multiple issues

Arch Linux Security Advisory ASA-201910-16 ========================================== Severity: Critical Date : 2019-10-26 CVE-ID : CVE-2018-6156 CVE-2019-11757 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-11765 CVE-2019-15903 CVE-2019-17000...

[ASA-201910-17] chromium: multiple issues

Arch Linux Security Advisory ASA-201910-17 ========================================== Severity: High Date : 2019-10-26 CVE-ID : CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707 CVE-2019-13708 CVE-2019-13709...

NetApp Clustered Data ONTAP CVE-2019-5508 Denial of Service Vulnerability

Description NetApp Clustered Data ONTAP is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions. Clustered Data ONTAP 9.2 through 9.6 versions are vulnerable. Technologies Affected NetApp Clustered Data ONTAP 9.2 NetApp Clustere...

Multiple IBM Products CVE-2019-4400 Directory Traversal Vulnerability

Description Multiple IBM Products are prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to read arbitrary files that contain sensitive information or to access files outside of the restricted directory to obtain sensitive...

PT-2019-14888 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions up to 4.5.7 Description: An issue was discovered in the file appconference controlsconference control details.php, where an unsanitized id variable coming from the URL is reflected in HTML, leading to XSS. Recommendations:...