CVE-2019-19208: Improper Control of Generation of Code

Codiad Web IDE through 2.8.4 allows PHP Code injection...

PT-2020-10088

Name of the Vulnerable Software and Affected Versions Codiad Web IDE versions through 2.8.4 Description The issue allows PHP code injection. Recommendations For versions through 2.8.4, update to a version later than 2.8.4 to resolve the issue...

QEMU 'ide_dma_cb()' function denial of service vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in the 'idedmacb' function in the hw/ide/core.c file in QEMU versions 2.4.0 through 4.2.0. An...

DEBIAN-CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

PT-2019-4874 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.4.0 through 4.2.0 Description: An issue was discovered in the ide dma cb function, which can cause the QEMU process in the host system to crash via a special SCSI IOCTL SEND COMMAND. This issue implies that the size of...

CVE-2019-20175: Improper Check for Unusual or Exceptional Conditions

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

PT-2019-5280

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a null pointer dereference in QEMU, which can lead to a denial of service. Specifically, the ahci commit buf function in ide/ahci.c is vulnerable when the command header...

JetBrains IntelliJ IDEA has an unspecified vulnerability (CNVD-2019-40597)

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA that stems from the program logging server credentials in plaintext to the IDE configuration file. No details of the...

RIPS 3.2: Patch Generation and New IDE Integrations

Automated Patch Generation RIPS scans your source code for critical security vulnerabilities fully automated in only a few minutes. But the most time-intense task when securing your application is to research and to write code patches that fix all the detected security problems sufficiently...

PT-2019-13212

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!IEP SetColorProfile+0x00000000000c47ff, which may indicate a problem with memory access or handling...

PT-2019-13208

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue is related to a User Mode Write AV starting at a specific memory location, IDE ACDStd!JPEGTransW+0x00000000000024ed. This suggests a problem with the way the software handles certain operations,...

PT-2019-13210

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!IEP SetColorProfile+0x00000000000b9e7a. Recommendations For ACDSee Free version 1.1.21, at the moment, there is n...

PT-2019-13211

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IEP SetColorProfile+0x00000000000b9c2f, in the IDE ACDStd module. Recommendations For ACDSee Free version 1.1.21, at the...

PT-2019-13209

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!JPEGTransW+0x0000000000002450. This suggests a problem related to the handling of JPEG transactions within the...

CVE-2019-9872

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-9873

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...

Design/Logic Flaw

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-9873

CVE-2019-9873 affects JetBrains IntelliJ IDEA Ultimate. When configuring Task Servers, the IDE could store server credentials in plaintext in its configuration files, exposing sensitive data. The root cause is cleartext storage of secrets in the IDE’s configuration. The issue has been fixed in th...