2117 matches found
php-shellcommand command injection vulnerability
php-shellcommand is a package for executing shell commands in PHP. An operating system command injection vulnerability exists in versions of php-shellcommand prior to 1.6.1. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. from...
CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure...
UBUNTU-CVE-2019-13757
Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
TitanHQ WebTitan has an unspecified vulnerability (CNVD-2019-44522)
TitanHQ WebTitan is a web content filter from TitanHQ Ireland. A security vulnerability exists in TitanHQ WebTitan versions prior to 5.18. The vulnerability can be exploited by an attacker to execute arbitrary code by overwriting an existing file or adding a new PHP file to the web root directory...
DEBIAN-CVE-2019-5879
Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...
UBUNTU-CVE-2019-5853
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Centreon Input Validation Error Vulnerability
Centreon Merethis Centreon is an open source IT monitoring software package from Centreon France that needs to be used with Nagios. The software enables the management of Nagios via the Web, as well as the monitoring of networks, operating systems and applications via third-party components. An...
Lenovo System Interface Foundation Unsigned DLL Loading Vulnerability
The Lenovo System Interface Foundation is a collection of system services, drivers and plug-ins that support Lenovo Vantage applications. An unsigned DLL loading vulnerability exists in Lenovo System Interface Foundation versions prior to 1.1.18.3. An attacker can exploit this vulnerability to lo...
UBUNTU-CVE-2019-19081
A memory leak in the nfpflowerspawnvnicreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service memory consumption, aka CID-8ce39eb5a67a...
elliptic-php competitive conditions issue vulnerability
elliptic-php is a PHP-based elliptic curve cryptographic library. A competitive condition issue vulnerability exists in versions of elliptic-php prior to 1.0.6, which can be exploited by an attacker to recover long-lived private keys...
Red Hat Infinispan Elevation of Privilege Vulnerability
Red Hat Infinispan is a distributed caching and key-value NoSQL data storage software from Red Hat Red Hat. A security vulnerability exists in versions prior to Red Hat Infinispan 10.0.0 Final. An attacker could exploit the vulnerability to invoke private methods with Infinispan privileges...
DEBIAN-CVE-2019-0146
Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information...
CVE-2019-16205
A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...
numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have...
BSA-2019-864
Security Advisory ID : BSA-2019-864 Component : SANnav portal Revision : 1.0 A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication...
eBrigade SQL Injection Vulnerability (CNVD-2019-35774)
eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...
eBrigade SQL Injection Vulnerability (CNVD-2019-35770)
eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...
Apple Xcode ld64 component arbitrary code execution vulnerability (CNVD-2019-37184)
Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...