CVE-2019-4101

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PDGETDIAGHIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091...

PT-2019-16898

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.1, 10.5, and 11.1 Description The issue allows users with specific permissions to cause a denial of service. Users that have both EXECUTE on PD GET DIAG HIST and acces...

PT-2019-13047

Name of the Vulnerable Software and Affected Versions pfSense versions 2.4.4-p2 through 2.4.4-p3 Description The issue allows an attacker to leverage XSS to upload arbitrary executable code to a server if an authenticated administrator can be tricked into clicking on a button on a phishing page...

Privilege Escalation

The ppc64-diag packages provide diagnostic tools for Linux on the 64-bit PowerPC platforms. The platform diagnostics write events reported by the firmware to the service log, provide automated responses to urgent events, and notify system administrators or connected service frameworks about the...

PT-2019-19969

Name of the Vulnerable Software and Affected Versions DASAN H660RM GPON routers with firmware 1.03-0022 Description The issue concerns a lack of authorization check in the diag tool.cgi component, allowing remote attackers to send a GET request and execute a ping command. This can be used to...

openSUSE Security Update : qemu (openSUSE-2019-254)

This update for qemu fixes the following issues : Security issues fixed : - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493. -...

Code injection

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...

CVE-2018-19009

CVE-2018-19009 affects Pilz PNOZmulti Configurator (all versions prior to 10.9). The vulnerability stems from clear-text storage of credentials, enabling an authenticated local attacker to view sensitive PMI m107 diag HMI credentials and, with physical access, potentially modify data on that HMI....

CVE-2018-19009

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...

PT-2019-9701

Name of the Vulnerable Software and Affected Versions Pilz PNOZmulti Configurator versions prior to 10.9 Description The issue allows an authenticated attacker with local access to view sensitive credential data in clear-text, which is applicable to the PMI m107 diag HMI device. An attacker with...

CVE-2018-19009: Cleartext Storage of Sensitive Information

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker wi...

Arbitrary File Write

ppc64-diag is vulnerable to arbitrary file overwrite. Multiple insecure temporary file use flaws were found in the way the ppc64-diag utility created certain temporary files. A local attacker could possibly use either of these flaws to perform a symbolic link attack and overwrite arbitrary files...

Pilz PNOZmulti Configurator

1. EXECUTIVE SUMMARY CVSS v3 3.3 ATTENTION: Low skill level to exploit Vendor: Pilz GmbH & Co. KG Pilz Equipment: PNOZmulti Configurator Vulnerability: Clear-text Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow sensitive data to be...

CVE-2018-11984

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

Design/Logic Flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

CVE-2018-11984

CVE-2018-11984 affects Android releases based on CAF/Linux DIAG driver. A use-after-free and an out-of-bounds access in the DIAG driver can lead to a local, high-impact condition. The accompanying CVSS3 base score is 7.8 (HIGH); CVSS2 is 4.6 (MEDIUM). The provided documents do not include exploit...

CVE-2018-11984

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

CVE-2018-11984: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

PT-2018-10932

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A use after free condition and an out-of-bounds access can occur in the DIAG driver,...

CVE-2018-11897

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit...