Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2019-12137)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZIX files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacke...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12174)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Replication subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and earlier. An...

PT-2019-11705 · Jenkins · Jenkins Azure Publishersettings Credentials Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Azure PublisherSettings Credentials Plugin versions 1.2 and earlier Jenkins Azure PublisherSettings Credentials Plugin versions prior to 1.5 Description: The issue concerns the storage of credentials in an unencrypted manner within th...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-11757)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.15 and earlier. An...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-11753)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and earlier. An...

Apache Airflow Cross-Site Request Forgery Vulnerability (CNVD-2019-13855)

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A cross-site request forgery vulnerability exists in the airflow webserver...

Adobe XD Path Traversal Vulnerability (CNVD-2019-30086)

Adobe XD is a one-stop UX/UI design platform on which users can design and prototype mobile apps and web pages. A path traversal vulnerability exists in Adobe XD 16.0 and earlier versions. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2019-12910)

Open-Xchange AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in Open-Xchange AppSuite 7.10.1 and prior versions, which arises from...

CVE-2018-4470

A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6...

CVE-2018-4338

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4153

An injection issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14...

UBUNTU-CVE-2019-1788

A vulnerability in the Object Linking & Embedding OLE2 file scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of prope...

Teclib GLPI SQL Injection Vulnerability

Teclib GLPI is an IT asset management solution. A SQL injection vulnerability exists in Teclib GLPI version 9.3.3 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'cycle' parameter of the /scripts/unlocktasks.php file...

PT-2019-11415

Name of the Vulnerable Software and Affected Versions: Kentico Xperience versions 9.x and earlier Kentico Xperience versions 10.0.x through 10.0.51 Kentico Xperience versions 11.0.x through 11.0.47 Kentico Xperience versions 12.0.x through 12.0.14 Description: The issue is related to the...

Foxit Reader and PhantomPDF Out-of-Bounds Read Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in the processing of PDF files in Foxit Reader 9.3.0.10826 and earlier versions for...

CVE-2019-6702

The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier...

rdesktop Input Validation Error Vulnerability

rdesktop is an open source remote desktop client program. A numeric error vulnerability exists in rdesktop 1.8.3 and earlier versions, which arises from a networked system or product that does not properly compute or convert resulting numbers. An attacker could exploit this vulnerability to cause...

Adobe Digital Editions Heap Overflow Vulnerability

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. A heap overflow vulnerability exists in Adobe Digital Editions 4.5.10.185749 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Devaldi FlexPaper Code Execution Vulnerability

Devaldi FlexPaper is a New Zealand Devaldi company's a lightweight Web-based PDF document viewing components . A code execution vulnerability exists in Devaldi FlexPaper version 2.3.6 and earlier versions, which can be exploited by remote attackers to execute code...

JVN#11622218: iChain Insurance Wallet App for iOS vulnerable to directory traversal

iChain Insurance Wallet App for iOS provided by iChain, Inc. uses the old version of cordova-plugin-ionic-webview, and inherits a directory traversal vulnerability CWE-22, CVE-2018-16202. Impact A remote attacker may obtain an arbitrary file such as a file related to an application on iOS device...