Openfind MAIL2000 /cgi-bin/portal Login Function Cross-Site Scripting Vulnerability

Openfind Mail2000 is a Web-based e-mail system. A cross-site scripting vulnerability exists in the login function of /cgi-bin/portal in Openfind Mail2000 versions 6.0 and earlier and 7.0 and earlier. The vulnerability stems from a lack of proper validation of client data by the WEB application. A...

CVE-2019-8247

Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-8244

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2019-8241

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2019-8243

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Adobe Illustrator Memory Corruption Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms. An attacker can exploit the vulnerability to execute code...

Adobe Media Encoder Out-of-Bounds Write Vulnerability

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS-based platforms. An attacker can exploit the vulnerability to execute code...

Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2019-41625)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS platforms. An attacker can exploit this vulnerability to obtain sensitive...

Race condition

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Cryptocat Encryption Issues Vulnerabilities

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in the Socialist Millionnaire Protocol in versions prior to Cryptocat 2.0.22, which stems from a weak encryption mechanism. An attacker can exploit the vulnerability to obtain sensitive information...

Linux denial of service vulnerability

lux is a cryptocurrency. A security vulnerability exists in lux version 5.2.2 and earlier. A remote attacker could exploit this vulnerability to cause a denial of service...

PIVX Denial of Service Vulnerability

PIVX is a cryptocurrency. A security vulnerability exists in PIVX 3.1.03 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

CVE-2019-13547

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication...

TYPO3 URL redirect SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association . URL redirect is used in which a URL redirection extension plugin . A SQL injection vulnerability exists in TYPO3 URL redirect 1.2.1 and earlier versions. The vulnerability stems from a lac...

Tenable Network Security Nessus Denial of Service Vulnerability

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A denial of service vulnerability exists in Tenable Network Security Nessus version 8.6.0 and earlier versions, which can be exploited by remote attackers to cause the Nessus scanner...

CVE-2019-8236

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

Palo Alto Networks Zingbox Inspector Information Disclosure Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An information disclosure vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.294 and earlier. The vulnerability...

CVE-2019-8170

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Cisco SPA100 Denial of Service Vulnerability

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A denial of service vulnerability exists in the web-based management interface of Cisco SPA100 Series 1.4.1 SR3 and earlier. The...