11259 matches found
SalesAgility SuiteCRM SQL Injection Vulnerability (CNVD-2019-16996)
SalesAgility SuiteCRM is a suite of enterprise-grade open source customer relationship management CRM. A SQL injection vulnerability exists in SalesAgility SuiteCRM versions 7.8.x prior to 7.8.30, 7.10.x prior to 7.10.17, and 7.11.x prior to 7.11.5, which can be exploited by an attacker to execut...
CVE-2019-4257
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945...
CVE-2019-4185
IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975...
PT-2019-16997 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.5 through 11.7 Description: The issue allows sensitive information in an error message to be disclosed, which could be used to conduct further attacks against the system. Recommendations: For...
UBUNTU-CVE-2019-6781
An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into notification emails...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2019-16213)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft IE 9, 10, and 11. The vulnerability arises from errors such as configuration during operation of a networke...
OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: 2D. Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...
PT-2019-4078 · Postgresql +5 · Postgresql +5
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5.x up to, excluding 9.5.17 PostgreSQL versions 9.6.x up to, excluding 9.6.13 PostgreSQL versions 10.x up to, excluding 10.8 PostgreSQL versions 11.x up to, excluding 11.3 Description: The issue is related to an error in...
CVE-2019-2704
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: IPS Package Manager. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successfu...
DEBIAN-CVE-2019-2602
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
CVE-2019-2577
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: File Locking Services. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...
CVE-2018-3314
Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Customer. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software...
OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
GitLab Input Validation Error Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...
USN-3949-1 openjdk-lts vulnerability
It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An attacker could use this to expose sensitive information and possibly bypass Java sandbox restrictions. CVE-2019-2422 Please note that with this update, the OpenJDK package in Ubuntu 18.04 LTS has...
Sophos IPSec Client Access Control Error Vulnerability
Sophos IPSec Client is a VPN client application. An access control error vulnerability exists in Sophos IPSec Client version 11.04 NCPSecure Entry Client version 10.11 r32792. The vulnerability arises from the network system or product not properly restricting access to resources from unauthorize...
Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-17527)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 10 and 11. A remote attacker could exploit this...
Apple iOS Core Bluetooth Component Memory Corruption Vulnerability
Apple iOS is an operating system for mobile devices developed by Apple Inc. Core Bluetooth is one of the core Bluetooth components. A security vulnerability exists in the Core Bluetooth component in Apple iOS versions prior to 11.4.1. The vulnerability can be exploited to execute arbitrary code...
Apple iOS Phone Component Logic Vulnerability
Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which the Phone is one of the telephony components. A security vulnerability exists in the Phone component of Apple iOS versions prior to 11.4.1. No details of the vulnerability are available at this time...