openSUSE: Security Advisory for qemu (openSUSE-SU-2019:2059-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary File Deletion Vulnerability in ShopXO Backend

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO backend arbitrary file deletion vulnerability exists . An attacker can exploit the vulnerability to delete any file with a php suffix...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:2059-1 Rating: important References: 1079730 1098403 1111025 1119115 1134883 1135902 1136540 1136778 1140402 1143794 Cross-References: CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 Affected Products: openSUSE Leap...

openSUSE Security Update : qemu (openSUSE-2019-2059)

This update for qemu fixes the following issues : Security issues fixed : - CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. - CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. - CVE-2019-13164: Security...

DEBIAN-CVE-2019-15847

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

ALPINE-CVE-2019-15847

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

CVE-2019-15847

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

File upload vulnerability in UsualToolCMS backend a***_te***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the UsualToolCMS backend ate.php file. An attacker can exploit this vulnerability to gain server privileges...

SQL injection vulnerability in UsualToolCMS backend a***_bo***_ca***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the UsualToolCMS backend aboca.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in UsualToolCMS backend a***_te***.php

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the backend ate.php of UsualToolCMS. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in DuomiCms Backend

Duomi DuomiCms film and television management system is a set of video on demand system designed for film and television station owners, using PHP + MYSQL architecture, native PHP code to bring excellent access speed and load capacity. DuomiCms backend has SQL injection vulnerability, attackers c...

File Upload Vulnerability in OKLite Backend

OKLite is a set of minimalist enterprise station system, the main target group is the display of enterprise website users, so that traditional small businesses quickly deploy the site, strengthen their brand awareness, to achieve the publicity of the company's image. There is a file upload...

SQL injection vulnerability in zzzzphp backend sa***.php page

zzphp is a free website builder developed in PHP language. There is a SQL injection vulnerability in the sa.php page of zzzphp background, which can be exploited by attackers to obtain sensitive database information...

S-CMS php version government website builder system backend aj***.php page has SQL injection vulnerability

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the background aj.php page of the S-CMS php version of the government website building system, which can be exploited by attackers to obtain sensitive database data...

Command Execution Vulnerability in zzzphp V1.7.2 Backend

zzphp is a free website builder developed in PHP language. zzzphp V1.7.2 command execution vulnerability exists in the background, an attacker can exploit the vulnerability to execute arbitrary code...

S-CMS enterprise website building system backend C_da*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Cda parameter in the background of S-CMS enterprise website building system. Attackers...

Command Execution Vulnerability in zzzzphp Backend

zzphp use PHP+mysql/access/sqlite free building station whole system, support cell phone automatic synchronization. There is a command execution vulnerability in the background of zzzphp. An attacker can exploit the vulnerability to execute commands and gain server privileges...

S-CMS enterprise website builder system backend db***.php file has SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the db.php file in the background of S-CMS enterprise website building system. Attackers c...

Scientific Linux Security Update : gvfs on SL7.x x86_64 (20190806)

Security Fixes : - gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password CVE-2019-3827 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid128221...

S-CMS enterprise website builder system backend P_br*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Pbr parameter in the background of S-CMS enterprise website building system. Attackers...