374 matches found
PHP PEAR 'Archive_Tar' Multiple Security Vulnerabilities
Description PEAR ArchiveTar is prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the application, obtain sensitive information, bypass certain security restrictions and perform unauthorized actions. PEAR ArchiveTar version...
SQLite CVE-2019-19880 Denial of Service Vulnerability
Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...
PHP CVE-2019-11049 Remote Denial Of Service Vulnerability
Description PHP is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service condition. Technologies Affected PHP PHP 7.0 PHP PHP 7.0.0 PHP PHP 7.0.1 PHP PHP 7.0.10 PHP PHP 7.0.11 PHP PHP 7.0.12 PHP PHP 7.0.13 PHP PHP 7.0.14 PHP PHP 7.0.15 PH...
Django CVE-2019-19844 Security Bypass Vulnerability
Description Django is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Djangoproject Django 1.11 Djangoproject Django 1.11.1 Djangoproject...
Linux kernel Multiple Security Vulnerabilities
Description Linux kernel are prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code and cause denial-of-service conditions. Linux kernel 5.0.21 is vulnerable; other versions may also be affected. Technologies Affected Linux kernel 5.0.21...
Multiple TIBCO Spotfire Products CVE-2019-17337 Cross Site Scripting Vulnerability
Description Multiple TIBCO Spotfire Products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit...
CVE-2019-18269
Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...
Microsoft Windows GDI Component CVE-2019-1466 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows Remote Desktop Protocol CVE-2019-1489 Information Disclosure Vulnerability
Description Microsoft Windows Remote Desktop Protocol is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows XP SP3 Recommendations Block external acce...
Siemens SCALANCE W700/W1700 CVE-2018-14526 Information Disclosure Vulnerability
Description Siemens SCALANCE W700 and W1700 is prone to an information disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. Successful exploits may lead to other attacks. The following versions of SCALANCE W700 and W1700 are affected: Siemens SCALANCE W700...
Google Android System Component Multiple Security Vulnerabilities
Description Google Android is prone to multiple security vulnerabilities. An attacker can leverage these issues to gain sensitive information, elevate privileges or execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues...
Security Bulletin: IBM TRIRIGA Application platform is vulnerable to a cross-site scripting attack. (CVE-2016-2883)
Summary IBM TRIRIGA Application Platform is vulnerable to cross-site scripting that could be used to steal cookie-based authentication credentials. Vulnerability Details CVEID: CVE-2016-2883 DESCRIPTION: IBM TRIRIGA is vulnerable to cross-site scripting, caused by improper validation of...
HAProxy CVE-2019-19330 CRLF Injection Vulnerability
Description HAProxy is prone to a CRLF-injection vulnerability. An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks. HAProxy versions prior to 2.0.10 are vulnerable. Technologies Affected haproxy haproxy 1.4 haproxy haproxy 1.4.0 haproxy hapro...
Multiple Pivotal RabbitMQ Products CVE-2019-11291 Cross Site Scripting Vulnerability
Description Multiple Pivotal RabbitMQ products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
phpMyAdmin CVE-2019-19617 Multiple Information Disclosure Vulnerabilities
Description phpMyAdmin is prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to gain access to sensitive information that may aid in further attacks. Versions prior to phpMyAdmin 4.9.2 are vulnerable. Technologies Affected phpMyAdmin phpMyAdmin 4.7.7...
Cisco Email Security Appliance CVE-2019-15988 Remote Security Bypass Vulnerability
Description Cisco Email Security Appliance is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq09347. Technologies...
Cisco Small Business RV Series Routers CVE-2019-15990 Information Disclosure Vulnerability
Description Cisco Small Business RV Series Routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq76840. Technologies Affected Cisco RV016...
Google Android Camera CVE-2019-2234 Multiple Security Bypass Vulnerabilities
Description Google Android is prone to multiple security-bypass vulnerabilities. An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions, or gain access to sensitive information; this may lead to further attacks. Technologies Affected Google...
WordPress WP Maintenance Plugin CVE-2019-19979 Cross Site Request Forgery Vulnerability
Description The WP Maintenance Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. WP Maintenance versions prior to 5.0...
Lexmark Services Monitor CVE-2019-16758 Directory Traversal Vulnerability
Description Lexmark Services Monitor is prone to a directory-traversal vulnerability. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve sensitive information. This may aid in further attacks. Lexmark Services Monitor 2.27.4.0.39 is vulnerabl...