ALPINE-CVE-2019-13300

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns...

CVE-2019-13300

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns...

Pydio Cells Information Disclosure Vulnerability

Pydio Cells is a transitional application for managing files on a Pydio Cells 1.2.X server. An information disclosure vulnerability exists in versions of Pydio Cells prior to 1.5.0, which stems from Pydio Cells failing to properly handle a Name field that is not in the expected Unicode format and...

CVE-2019-12903

Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database column/table name as pert of the error message, exposing sensitive information...

CVE-2019-10130

PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...

UBUNTU-CVE-2019-10130

A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain...

CVE-2019-10130

A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain...

PT-2019-4078 · Postgresql +5 · Postgresql +5

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5.x up to, excluding 9.5.17 PostgreSQL versions 9.6.x up to, excluding 9.6.13 PostgreSQL versions 10.x up to, excluding 10.8 PostgreSQL versions 11.x up to, excluding 11.3 Description: The issue is related to an error in...

Arbitrary Code Execution

firefox/thunderbird is vulnerable to arbitrary code execution.A use-after-free vulnerability in the function nsFrameList::FirstChild allows remote attackers to cause a heap memory corruption that would result in arbitrary code execution or application crash by changing the size of the a container...

Jfinal cms backend column scrolling image at the existence of file upload vulnerability

Jfinal cms, using a simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms background column scrolling picture at the existence of file upload vulnerability, its background column management...

CVE-2018-17483

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2019-07929)

YzmCMS is an open source CMS Content Management System by Yuan Zhimeng programmers in China. A cross-site scripting vulnerability exists in YzmCMS version 5.2. A remote attacker can use the 'column name' parameter of admin/category/edit.html page to inject arbitrary Web script or HTML with the he...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:0249-1 Rating: important References: 1122983 1125330 Cross-References: CVE-2016-5824 CVE-2018-12405 CVE-2018-17466 CVE-2018-18335 CVE-2018-18356 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494...

Path traversal

A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...

Cross site scripting

An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...

CVE-2019-9015

A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...

CVE-2019-9016

An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...

CVE-2019-9015

CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:0119-1)

This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed : CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-317...

DEBIAN-CVE-2018-20542

There is a heap-based buffer-overflow at generatorspgemmcscreader.c function libxsmmsparsecscreader in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 which is in a different part of the source code and is seen at a different address...