Cryptocat Encryption Issues Vulnerabilities

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in the Socialist Millionnaire Protocol in versions prior to Cryptocat 2.0.22, which stems from a weak encryption mechanism. An attacker can exploit the vulnerability to obtain sensitive information...

PIVX Denial of Service Vulnerability

PIVX is a cryptocurrency. A security vulnerability exists in PIVX 3.1.03 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

Linux denial of service vulnerability

lux is a cryptocurrency. A security vulnerability exists in lux version 5.2.2 and earlier. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-13547

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication...

TYPO3 URL redirect SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association . URL redirect is used in which a URL redirection extension plugin . A SQL injection vulnerability exists in TYPO3 URL redirect 1.2.1 and earlier versions. The vulnerability stems from a lac...

Tenable Network Security Nessus Denial of Service Vulnerability

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A denial of service vulnerability exists in Tenable Network Security Nessus version 8.6.0 and earlier versions, which can be exploited by remote attackers to cause the Nessus scanner...

CVE-2019-8236

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

Palo Alto Networks Zingbox Inspector Information Disclosure Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An information disclosure vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

CVE-2019-8170

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Cisco SPA100 Denial of Service Vulnerability

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A denial of service vulnerability exists in the web-based management interface of Cisco SPA100 Series 1.4.1 SR3 and earlier. The...

CVE-2019-2935

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

UBUNTU-CVE-2019-2998

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

nostromo nhttpd memory error vulnerability

nostromo nhttpd is an open source web server . A memory error vulnerability exists in the 'SSLaccept' function in nostromo nhttpd 1.9.6 and earlier versions. An attacker is able to trigger a denial of service via a crafted http request...

PT-2019-11852 · Puppet +1 · Jenkins Puppet Enterprise Pipeline +1

Name of the Vulnerable Software and Affected Versions: Jenkins Puppet Enterprise Pipeline versions 1.3.1 and earlier Description: The issue allows attackers to execute arbitrary code if they can execute Script Security protected scripts, due to unsafe values specified in the custom Script Securit...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37132)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker could exploit this vulnerability to cause the MySQL serve...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37140)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker can exploit this vulnerability to cause the MySQL server ...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37139)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker can exploit this vulnerability to cause the MySQL server ...

Unspecified Vulnerability in Kaseya VSA RMM

Kaseya VSA RMM is a remote monitoring and terminal management solution from Kaseya, Switzerland. A security vulnerability exists in Kaseya VSA RMM version 9.5.0.22 and earlier. An attacker can exploit this vulnerability to gain administrative privileges...

Gila CMS Cross-Site Scripting Vulnerability (CNVD-2019-36960)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in gila-blog and gila-mag in Gila CMS 1.11.4 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...