Moxa EDR-810 Information Disclosure Vulnerability (CNVD-2019-43364)

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. An information disclosure vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. An attacker could exploit this vulnerability to retrieve certai...

SilverStripe Information Disclosure Vulnerability

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and earlier versions of a security vulnerability , the vulnerabilit...

PT-2019-3608 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.293 and earlier Description: A security issue exists due to the failure to neutralize special elements in the network traffic handler. This could allow a remote attacker to intercept and modify software update...

Cisco HyperFlex Software Cross-Site Scripting Vulnerability

Cisco HyperFlex is Cisco's hyperconverged infrastructure HCI platform built to meet the needs of multi-cloud IT, supporting any application, anywhere, with a simple hyperconverged infrastructure. A cross-site scripting vulnerability exists in the web interface of Cisco HyperFlex Software versions...

Advantech WebAccess Buffer Overflow Vulnerability (CNVD-2019-32469)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A buffer overflow vulnerability exists in Advantech WebAccess 8.4.1 and earlier versions that can be exploited by an attacker to execute remote code...

Advantech WebAccess Code Injection Vulnerability

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A code injection vulnerability exists in Advantech WebAccess 8.4.1 and earlier versions, which can be exploited by an attacker to execute remote code or cause a system crash...

LimeSurvey Reflective Cross-Site Scripting Vulnerability (CNVD-2019-31350)

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A reflective cross-site scripting vulnerability exists in application/core/SurveyCommonAction.php in versions prior to Limesurvey 3.17.14...

LibreNMS Information Disclosure Vulnerability

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . An information disclosure vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by an attacker to identify the exact code version installed and obtain local file paths...

LibreNMS Authentication Bypass Vulnerability

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . An authentication bypass vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by an attacker to access multiple scripts...

Knowage Username Enumeration Vulnerability

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A security vulnerability exists in Knowage 6.1.1 and earlier versions. An attacker could exploit the vulnerability to enumerate valid usernames...

EZAutomation EZ PLC Editor Buffer Overflow Vulnerability

EZAutomation EZ PLC Editor is a suite of PLC Programmable Logic Controller programming software from EZAutomation, USA. A buffer overflow vulnerability exists in EZAutomation EZ PLC Editor 1.8.41 and earlier versions, which can be exploited by an attacker to corrupt memory and execute code with t...

WordPress google-analyticator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-analyticator is a plugin used in it to display and manage data from the Google Analytics website analytics or website traffic...

Xymon Stack Buffer Overflow Vulnerability

Xymon is an open source cross-platform system status monitoring software. A stack buffer overflow vulnerability exists in the status log viewer component in Xymon 4.3.28 and earlier versions. No details of the vulnerability are provided at this time...

CVE-2019-7980

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-8001

CVE-2019-8001 affects Adobe Photoshop CC versions 19.1.8 and earlier, and 20.0.5 and earlier. It describes an out-of-bounds write vulnerability that could allow arbitrary code execution. The issue is acknowledged in the APSB19-44 advisory, which also notes multiple related vulnerabilities in the ...

CVE-2018-13367

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...

CVE-2019-8096

CVE-2019-8096 affects Adobe Acrobat and Reader (various legacy builds up to 2019.012.20035 and earlier; 2017.x and 2015.x series). The vulnerability is an out-of-bounds read in the affected components, with the impact described as information disclosure if exploited. No exploit details are provid...

mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Partition. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

mysql: Server: Options unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL...

mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...