WordPress Jetpack Plugin Unspecified Security Vulnerability

Description The Jetpack plugin for WordPress is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Jetpack 5.1 through 7.9 are vulnerable. Technologies Affected WordPre...

Ansible Tower CVE-2019-14890 Information Disclosure Vulnerability

Description Ansible Tower is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. That may aid in further attacks. Ansible Tower version 3.6.0 is vulnerable; other versions may also be affected. Technologies Affected Redhat Ansible...

Moodle CVE-2019-14880 Security Bypass Vulnerability

Description Moodle is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Moodle 3.5.9, 3.6.7 and 3.7.3 are vulnerable. Technologies Affected Moodle...

Apache Shiro CVE-2019-12422 Information Disclosure Vulnerability

Description Apache Shiro is prone to an information-disclosure vulnerability. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Versions prior to Apache Shiro 1.4.2 are vulnerable. Technologies Affected Apache Apache Shiro...

Moodle CVE-2019-14881 Cross Site Scripting Vulnerability

Description Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attack...

Moodle CVE-2019-14882 Open Redirection Vulnerability

Description Moodle is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to a...

F5 BIG-IP APM CVE-2019-6661 Denial of Service Vulnerability

Description F5 BIG-IP APM is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause excessive resource consumption, resulting in a denial-of-service condition. BIG-IP APM 14.1.0 through 14.1.2, 14.0.0 through 14.0.1, 13.0.0 through 13.1.3, 12.1.0 through 12.1.4, and...

Multiple ABB Products CVE-2019-18250 Authentication Bypass Vulnerability

Description Multiple ABB products are prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected ABB Plant Connect ABB Power Generati...

Philips IntelliBridge EC40 and EC80 CVE-2019-18241 Unauthorized Access Vulnerability

Description Philips IntelliBridge EC40 and EC80 is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. Technologies Affected Philips IntelliBridge EC40 Philips IntelliBridge...

Multiple Siemens Products CVE-2019-10936 Denial of Service Vulnerability

Description Multiple Siemens products are prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected device, denying service to legitimate users. Technologies Affected Siemens SIMATIC CFU PA Siemens SIMATIC ET 200AL Siemens SIMATIC ET 200M Siemens SIMATIC E...

Infinispan CVE-2019-10174 Privilege Escalation Vulnerability

Description Infinispan is prone to a privilege-escalation vulnerability. A remote attacker can exploit this issue to gain elevated privileges and perform unauthorized actions on an affected system. Technologies Affected Redhat Enterprise Application Platform Continuous Delivery Redhat JBoss Data...

Symfony CVE-2019-18889 Multiple Remote Code Execution Vulnerabilities

Description Symfony is prone to multiple remote code-execution vulnerabilities. Successfully exploiting these issues may result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Symfony versio...

WordPress Email Subscribers & Newsletters Plugin CVE-2019-19980 Security Bypass Vulnerability

Description The Email Subscribers Newsletters Plugin for WordPress is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Email Subscribers Newslette...

Istio CVE-2019-18817 Remote Denial of Service Vulnerability

Description Istio is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Istio versions prior to 1.3.5 are vulnerable. Technologies Affected Istio Istio 1.3.0 Istio Istio 1.3.1 Istio Istio...

WordPress Email Subscribers & Newsletters Plugin Cross Site Request Forgery Vulnerability

Description The Email Subscribers Newsletters Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. Versions prior to Ema...

Trusted Platform Module CVE-2019-16863 Unspecified Security Vulnerability

Description Trusted Platform Module is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Technologies Affected STMicroelectronics Trusted Platform Module Trusted...

SAP Treasury and Risk Management CVE-2019-0383 Remote Authorization Bypass Vulnerability

Description SAP Treasury and Risk Management is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP EA-FINSERV 6.0 SAP EA-FINSERV 6.03 SAP EA-FINSE...

Lenovo ThinkPad CVE-2019-6172 Remote Code Execution Vulnerability

Description Lenovo is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Technologies Affected Lenovo Thinkpad Recommendations Block external access at the network boundary, unle...

SAP UI5 HTTP Handler CVE-2019-0388 Unspecified Content Spoofing Vulnerability

Description SAP UI5 HTTP Handler is prone to an unspecified content-spoofing vulnerability. Attackers can exploit this issue to manipulate and spoof content, which may aid in further attacks. Technologies Affected SAP SAPUI5 SAP UI 7.5 SAP UI 7.51 SAP UI 7.52 SAP UI 7.53 SAP UI 7.54 Recommendatio...

Intel WIFI Drivers and PROSet/Wireless WiFi Software Multiple Memory Corruption Vulnerabilities

Description Intel WIFI Drivers and PROSet/Wireless WiFi Software are prone to multiple memory-corruption vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, gain sensitive information and cause denial-of-service conditions. Intel WIFI Drivers and PROSet/Wirele...