CVE-2019-2935

Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 19.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful attacks of thi...

UBUNTU-CVE-2019-2998

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2019-11852 · Puppet +1 · Jenkins Puppet Enterprise Pipeline +1

Name of the Vulnerable Software and Affected Versions: Jenkins Puppet Enterprise Pipeline versions 1.3.1 and earlier Description: The issue allows attackers to execute arbitrary code if they can execute Script Security protected scripts, due to unsafe values specified in the custom Script Securit...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37139)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker can exploit this vulnerability to cause the MySQL server ...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37132)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker could exploit this vulnerability to cause the MySQL serve...

nostromo nhttpd memory error vulnerability

nostromo nhttpd is an open source web server . A memory error vulnerability exists in the 'SSLaccept' function in nostromo nhttpd 1.9.6 and earlier versions. An attacker is able to trigger a denial of service via a crafted http request...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37140)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.17 and earlier. An attacker can exploit this vulnerability to cause the MySQL server ...

PT-2019-3589 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.17 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with network access via multiple protocols to...

Gila CMS Cross-Site Scripting Vulnerability (CNVD-2019-36960)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in gila-blog and gila-mag in Gila CMS 1.11.4 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Unspecified Vulnerability in Kaseya VSA RMM

Kaseya VSA RMM is a remote monitoring and terminal management solution from Kaseya, Switzerland. A security vulnerability exists in Kaseya VSA RMM version 9.5.0.22 and earlier. An attacker can exploit this vulnerability to gain administrative privileges...

MantisBT Command Injection Vulnerability

MantisBT is a lightweight, free and open source, web-based defect tracking system. A command injection vulnerability exists in MantisBT versions prior to 1.3.20 and 2.22.1, which can be exploited by an authenticated attacker to achieve remote code execution...

Moxa EDR-810 Information Disclosure Vulnerability (CNVD-2019-43364)

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. An information disclosure vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. An attacker could exploit this vulnerability to retrieve certai...

SilverStripe Information Disclosure Vulnerability

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and earlier versions of a security vulnerability , the vulnerabilit...

PT-2019-3608 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.293 and earlier Description: A security issue exists due to the failure to neutralize special elements in the network traffic handler. This could allow a remote attacker to intercept and modify software update...

Cisco HyperFlex Software Cross-Site Scripting Vulnerability

Cisco HyperFlex is Cisco's hyperconverged infrastructure HCI platform built to meet the needs of multi-cloud IT, supporting any application, anywhere, with a simple hyperconverged infrastructure. A cross-site scripting vulnerability exists in the web interface of Cisco HyperFlex Software versions...

Advantech WebAccess Code Injection Vulnerability

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A code injection vulnerability exists in Advantech WebAccess 8.4.1 and earlier versions, which can be exploited by an attacker to execute remote code or cause a system crash...

Advantech WebAccess Buffer Overflow Vulnerability (CNVD-2019-32469)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A buffer overflow vulnerability exists in Advantech WebAccess 8.4.1 and earlier versions that can be exploited by an attacker to execute remote code...

LibreNMS Information Disclosure Vulnerability

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . An information disclosure vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by an attacker to identify the exact code version installed and obtain local file paths...

LibreNMS Authentication Bypass Vulnerability

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . An authentication bypass vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by an attacker to access multiple scripts...

LimeSurvey Reflective Cross-Site Scripting Vulnerability (CNVD-2019-31350)

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A reflective cross-site scripting vulnerability exists in application/core/SurveyCommonAction.php in versions prior to Limesurvey 3.17.14...