PT-2019-14172

Name of the Vulnerable Software and Affected Versions Samsung J7 Max Android device with a build fingerprint of samsung/j7maxlteins/j7maxlte:8.1.0/M1AJQ/G615FXXU2BSB1:user/release-keys com.samsung.android.themecenter app version 7.0.1.0 Description The issue concerns a pre-installed app on the...

PT-2019-14124

Name of the Vulnerable Software and Affected Versions Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN X00G/ASUS X00G 1:7.0/NRD90M/IN X00G-14.02.1807.33-20180706:user/release-keys Description The issue concerns a pre-installed app with a package name of...

CVE-2019-15403: Undefined Security Weakness

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/INX00G/ASUSX00G1:7.0/NRD90M/INX00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14126

Name of the Vulnerable Software and Affected Versions Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW Phone/ASUS X00HD 4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderpro...

CVE-2019-15443: Undefined Security Weakness

The Samsung J7 Max Android device with a build fingerprint of samsung/j7maxlteins/j7maxlte:8.1.0/M1AJQ/G615FXXU2BSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other pre-installed...

CVE-2019-15404: Undefined Security Weakness

The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WWPhone/ASUSX00HD4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

PT-2019-14132

Name of the Vulnerable Software and Affected Versions Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN X00G/ASUS X00G 1:7.0/NRD90M/IN X00G-14.02.1807.33-20180706:user/release-keys Description The issue concerns a pre-installed app with a package name of...

PT-2019-14133

Name of the Vulnerable Software and Affected Versions Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW Phone/ASUS X00HD 4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys Description The issue concerns a pre-installed app with a package name of com.asus.loguploaderpro...

CVE-2019-12406

Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and...

CVE-2019-12406: Allocation of Resources Without Limits or Throttling

Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and...

PT-2019-4676

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.3.4 and 3.2.11 Description The issue is related to an uncontrolled resource consumption in Apache CXF, which can be exploited by a remote attacker to cause a denial of service. This can be achieved by crafting a...

MaxLength - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-073

This module enables you to set a maximum length allowed on text fields and indicate how many characters are left. The module doesn't sufficiently filter strings leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact the malicious script will not be...

max-td.de Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1948 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting max-td.de website and its users. Following coordinate...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-2)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE-SU-2019:2227-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

CVE-2017-18589

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...

CVE-2017-18589

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...

Design/Logic Flaw

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...

CVE-2017-18589

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...

CVE-2017-18589

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...