SAS Visual Analytics Cross-Site Scripting Vulnerability

SAS Visual Analytics is data visualization software that helps build and design interactive Web dashboards. A cross-site scripting vulnerability exists in the graph generator in SAS Visual Analytics 8.5. An attacker can exploit this vulnerability to execute malicious Javascript in a user's browse...

IBM DB2 Denial of Service Vulnerability (CNVD-2020-13054)

IBM DB2 is a set of relational database management system of American IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 version V11.5. An attacker can exploit this vulnerability to cause an...

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-10510)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF version 9.5.0.20723. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2020-8128

An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code...

CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4538158)

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4538158 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

CVE-2020-2676

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Printing. The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

PoC Exploits Released for Citrix ADC and Gateway RCE Vulnerability

It's now or never to prevent your enterprise servers running vulnerable versions of Citrix application delivery, load balancing, and Gateway solutions from getting hacked by remote attackers. Why the urgency? Earlier today, multiple groups publicly released weaponized proof-of-concept exploit cod...

UBUNTU-CVE-2019-19257

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 1 of 2...

WSO2 Enterprise Integrator Cross-Site Scripting Vulnerability

WSO2 Enterprise Integrator is the core of the WSO2 Integration Agile Platform, an open source integration product for cloud-native and container-native projects. A cross-site scripting vulnerability exists in WSO2 Enterprise Integrator version 6.5.0. The vulnerability stems from a lack of proper...

SonicWall SonicOS SSLVPN NACagent Code Issue Vulnerability

SonicWall SonicOS SSLVPN NACagent is a VPN Virtual Private Network client application from SonicWall USA. A code issue vulnerability exists in SonicOS SSLVPN NACagent version 3.5 Windows. An attacker can exploit this vulnerability to execute code with the help of a malicious binary...

CVE-2019-11992

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

Electronic Arts Origin Elevation of Privilege Vulnerability

Origin is a digital distribution platform for buying and playing video games from Electronic Arts in the United States. An elevation of privilege vulnerability exists in Electronic Arts Origin 10.5.x and earlier versions, which can be exploited by attackers to elevate privileges...

Electronic Arts Origin elevation of privilege vulnerability (CNVD-2020-04279)

Electronic Arts Origin is a game management platform from Electronic Arts. The platform includes features such as electronic software distribution, digital rights management, and a social networking system. A security vulnerability exists in Electronic Arts Origin 10.5.x and prior versions. An...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

PT-2019-17139 · Ibm · Ibm Db2 High Performance Unload

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5 Description: The issue is caused by an untrusted search path vulnerability, allowing a local attacker to execute arbitrary code on the system. An attacker could exploit thi...

SMPlayer Buffer Overflow Vulnerability (CNVD-2019-45407)

SMPlayer is a cross-platform open source multimedia player. A buffer overflow vulnerability exists in SMPlayer version 19.5.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

VMware Workstation and VMware Fusion Denial of Service Vulnerability (CNVD-2020-41588)

VMware Workstation is a desktop virtual computing software from VMware with Windows and Linux versions. VMware Fusion is a virtual machine hypervisor developed by VMware for Macintosh computers. A denial of service vulnerability exists in the RPC handler in VMware Workstation version 15.x prior t...

IrfanView Buffer Overflow Vulnerability (CNVD-2019-42233)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in rfanView version 4.53. The vulnerability stems from a networked system or product tha...

CVE-2019-3420

All versions up to V2.5.0EG1T5TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...