11260 matches found
PT-2019-6426 · Ruijie · Ruijie Eg-2000Se
Name of the Vulnerable Software and Affected Versions: Ruijie EG-2000SE versions 11.9 B11P1 Description: The issue is related to the upload.php script in the Ruijie EG-2000SE gateway, specifically with the UploadFile class. It allows for unrestricted file upload of dangerous file types. An attack...
CVE-2019-4183
IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973...
Telegram Information Disclosure Vulnerability (CNVD-2019-32023)
Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in versions of Telegram prior to 5.11 based on the Android platform. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An...
CVE-2019-16311
NIUSHOP V1.11 has CSRF via searchinfo to index.php...
OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
Microsoft Internet Explorer VBScript Engine Buffer Overflow Vulnerability (CNVD-2019-39010)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A buffer overflow vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE 9...
PT-2019-4097 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: A memory leak in the i2400m op rfkill sw toggle function in the Linux kernel allows attackers to cause a denial of service memory consumption. This issue is related to uncontrolled resource...
Linux kernel null pointer dereference vulnerability (CNVD-2019-31655)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c in versions of Linux kernel prior to 5.0.11. The...
DEBIAN-CVE-2019-10197
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directorie...
OpenJDK: Missing URL format validation (Networking, 8221518)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...
CVE-2019-3633
Buffer overflow in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results in DLPe reading unallocated memory...
Linux kernel buffer overflow vulnerability (CNVD-2019-29638)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'rdsrecvtracklatency' function in the net/rds/afrds.c file in versions of Linux kernel prior to 4.11. The vulnerability...
OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Unspecified Vulnerability in GitLab (CNVD-2019-44765)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...
Frappe Technologies Frappe Framework Cross-Site Scripting Vulnerability
Frappe Technologies Frappe Framework is a metadata-driven full-stack web application framework based on Python and JavaScript from Frappe Technologies, India. A cross-site scripting vulnerability exists in Frappe Technologies Frappe Framework version 10, version 11 before 11.1.46, and version 12,...
PostgreSQL Information Disclosure Vulnerability (CNVD-2019-26833)
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in PostgreSQL version 11. This...
qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
PT-2019-17779 · Freebsd · Freebsd +2
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.0-STABLE before r350637 FreeBSD versions 12.0-RELEASE before 12.0-RELEASE-p9 FreeBSD versions 11.3-STABLE before r350638 FreeBSD versions 11.3-RELEASE before 11.3-RELEASE-p2 FreeBSD versions 11.2-RELEASE before...
cPanel SQL Injection Vulnerability (CNVD-2019-26351)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...