PT-2019-5055

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a use-after-free in WebSockets, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may lead to unauthorized access to...

PT-2019-5057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a use-after-free condition in WebAudio, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker...

PT-2019-4320

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description The issue is related to insufficient input validation in the anti-spam protection mechanisms of Cisco Email Security Appliance ESA, allowing a remote attacker to...

The vulnerability in the Networking component of Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of the Networking component in Java SE and Java SE Embedded software platforms is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information and compromise its integrity...

PT-2019-3662

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Oracle GraalVM Enterprise Edition version 19.2.0 Description The issue is related to errors in handling HTTP proxy responses in the Java virtual machine component. It...

The vulnerability of the dpkg utility in the Astra Linux operating system, related to the lack of checks for the privilege PARSEC_CAP_INHERIT_INTEGRITY, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dpkg utility in the Astra Linux operating system is related to the lack of a check for the privilege PARSECCAPINHERITINTEGRITY. This privilege ensures that the integrity of the current process is maintained during package installation. Exploiting this vulnerability allows...

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux, related to a bug in access management, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux is related to configuration errors that lead to the addition of already deleted users to a newly created user group. Exploiting this vulnerability allows an attacker who operates remotel...

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

PT-2019-5701

Name of the Vulnerable Software and Affected Versions nfs-utils versions prior to 1.3.0-34.18.1 nfs-utils versions prior to 2.1.1-6.10.2 Description The issue is related to the incorrect assignment of standard permissions in the nsm drop privileges function of the nfs-utils package. This can allo...

PT-2019-4996

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient input validation in the Blink rendering module of Google Chrome, allowing a remote attacker to compromise data integrity via a crafted HTML page. Thi...

PT-2019-5084

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to an out of bounds memory access in JavaScript, which can be exploited by a remote attacker to potentially access confidential data, compromise data integrity, and...

CVE-2019-16174: Improper Restriction of XML External Entity Reference

An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity...

PT-2019-6153

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.20.0-rc1 Description The issue is related to an out-of-bounds access of an ASN.1 Bitstring in the decode bit string function in libopensc/asn1.c. This can allow an attacker to access confidential data, compromise its...

PT-2019-6175

Name of the Vulnerable Software and Affected Versions matio aka MAT File I/O Library version 1.5.17 Description The issue is related to an integer overflow vulnerability in the Mat VarReadNextInfo5 function in mat5.c. This vulnerability can be exploited by a remote attacker to potentially access...

Code injection

A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...

CVE-2019-6582

CVE-2019-6582 affects Siemens Siveillance VMS (multiple releases: 2017 R2 <11.2a, 2018 R1 <12.1a, 2018 R2 <12.2a, 2018 R3 <12.3a, 2019 R1

CVE-2019-6582

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

CVE-2019-6582: Improper Authorization

A vulnerability has been identified in Siveillance VMS 2017 R2 All versions V11.2a, Siveillance VMS 2018 R1 All versions V12.1a, Siveillance VMS 2018 R2 All versions V12.2a, Siveillance VMS 2018 R3 All versions V12.3a, Siveillance VMS 2019 R1 All versions V13.1a. An attacker with network access t...

PT-2019-2670

Name of the Vulnerable Software and Affected Versions SIMATIC MV400 family versions prior to V7.0.6 Description A vulnerability has been identified that allows an authenticated attacker to escalate privileges by sending specially crafted requests to the integrated webserver. The issue can be...

PT-2019-3290

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 3.x through 3.0.7 Description The issue is related to the Matroska demuxer in the VideoLAN VLC media player, which has a double free error when parsing a malformed MKV file type. This can be exploited by a...