5109 matches found
Apache Tomcat CVE-2019-17563 Session Fixation Vulnerability
Description Apache Tomcat is prone to a session-fixation vulnerability. An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application. Apache Tomcat versions 9.0.0.M1 through 9.0.29 are vulnerable. Technologies Affected Apache Tomcat...
PHP CVE-2019-11047 Heap Buffer Overflow Vulnerability
Description PHP is prone to a heap-based buffer-overflow vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. PHP 7.2.x versions prior to 7.2.26, 7.3.x...
Multiple TIBCO Spotfire Products CVE-2019-17335 Multiple Unauthorized Access Vulnerabilities
Description Multiple TIBCO Spotfire Products are prone to multiple unauthorized-access vulnerabilities. Attackers can exploit these issues to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. The following products are affected: TIBCO Spotfire Analytics...
TYPO3 Form Framework TYPO3-CORE-SA-2019-021 Cross Site Scripting Vulnerability
Description TYPO3 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker...
TYPO3 CVE-2019-19849 Multiple Remote Code Execution Vulnerabilities
Description TYPO3 is prone to multiple remote code-execution vulnerabilities. Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Versions prior to TYPO3 8.7.30,...
TYPO3 TYPO3-PSA-2019-011 Remote Code Execution Vulnerability
Description TYPO3 is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows an attacker to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Versions prior to TYPO3 8.7.30 and 9.5.12 a...
Microsoft SharePoint Server CVE-2019-1491 Information Disclosure Vulnerability
Description Microsoft SharePoint Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 SP2...
Multiple TIBCO Spotfire Products CVE-2019-17336 Multiple Information Disclosure Vulnerabilities
Description Multiple TIBCO Spotfire Products are prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues to obtain sensitive information. That may aid in further attacks. The following products are affected: TIBCO Spotfire Analytics Platform for AWS...
Multiple Citrix Products CVE-2019-19781 Remote Code Execution Vulnerability
Description Multiple Citrix Products are prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application. Technologies Affected Citrix NetScaler Gateway 10.5 Citrix NetScaler Gateway 11.1 Citri...
TYPO3 CVE-2019-19850 SQL Injection Vulnerability
Description TYPO3 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
Apache Superset CVE-2019-12413 Information Disclosure Vulnerability
Description Apache Superset is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. Apache Superset version prior to 0.31 are vulnerable. Technologies Affected Apache Superset 0.20 Apache Superset 0.2...
PHP CVE-2019-11044 Multiple Unspecified Security Vulnerabilities
Description PHP is prone to multiple unspecified security vulnerabilities. An attacker can exploit these issues to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. PHP 7.2.0 through 7.2.25, 7.3.0 through 7.3.12 and 7.4.0 are...
Atlassian Crowd CVE-2017-18107 Cross Site Request Forgery Vulnerability
Description Atlassian Crowd is prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue allows a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also...
Apache Xerces-C CVE-2018-1311 Remote Code Execution Vulnerability
Description Apache Xerces-C is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application or cause denial-of-service conditions. Apache Xerces-C versions 3.0.0 through 3.2.2 are vulnerable. Technologies...
Apache Superset CVE-2019-12414 Information Disclosure Vulnerability
Description Apache Superset is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. Apache Superset version prior to 0.32 are vulnerable. Technologies Affected Apache Superset 0.20 Apache Superset 0.2...
Ansible Tower Multiple Security Vulnerabilities
Description Ansible Tower is prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access or obtain sensitive information. That may aid in further attacks. Ansible Tower versions 3.6.1 and 3.5.3 are vulnerable; other versions may also be affected...
Dovecot CVE-2019-19722 Denial of Service Vulnerability
Description Dovecot is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Dovecot versions 2.3.9 and 2.3.9.1 are vulnerable. Technologies Affected Dovecot Dovecot 2.3.9 Dovecot Dovecot 2.3.9.1...
IBM MQ and MQ Appliance CVE-2019-4560 Denial of Service Vulnerability
Description IBM MQ is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the process, denying service to legitimate users. The following versions of IBM MQ and MQ Appliance are affected: IBM MQ versions 9.1 CD, 9.1 LTS, 9.0 LTS and 8.0 are vulnerable. IBM MQ...
Omron PLC CJ/CS Series ICSA-19-346-02 Multiple Security Vulnerabilities
Description Omron PLC CJ and CS Series are prone to multiple security vulnerabilities. An attacker may leverage these issues to bypass the authentication mechanism and gain unauthorized access to the affected application. The following products of Omron Programmable Logic Controllers are affected...
WordPress ListingPro Plugin Cross Site Scripting and Multiple HTML Injection Vulnerabilities
Description The ListingPro plugin for WordPress is prone to a cross-site scripting vulnerability and multiple HTML injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of th...