PT-2019-9318 · Forcepoint · Forcepoint Email Security

Name of the Vulnerable Software and Affected Versions: Forcepoint Email Security version 8.5 Description: A stack-based buffer overflow allows an attacker to craft malicious input, potentially crashing a process and creating a denial-of-service. Although no known Remote Code Execution RCE...

CVE-2019-4080

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...

Forcepoint Email Security Password Reset Vulnerability

Forcepoint Email Security is a suite of email protection solutions from US-based Forcepoint. The product includes features such as spam filtering, malware detection, phishing protection, and protection against intrusion BEC attacks. A security vulnerability exists in version 8.5.x of Forcepoint...

Micro Focus Solutions Business Manager Cross-Site Scripting Vulnerability (CNVD-2019-12127)

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...

Micro Focus Solutions Business Manager Code Injection Vulnerability

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A security...

PT-2019-19408 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.5.11 Description: A cross-site scripting XSS issue allows attackers to inject arbitrary web script or HTML via the xiwindow parameter. This could potentially lead to unauthorized actions on the affected system...

CVE-2018-19642

Denial of service issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

CVE-2018-19641

Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

CVE-2018-15815

FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file...

CVE-2019-8351

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

KinagaCMS Cross-Site Scripting Vulnerability

KinagaCMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in KinagaCMS versions prior to 6.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

RSA Archer Information Disclosure Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in Dell EMC RSA Archer...

IBM BigFix Platform Unauthorized Access Vulnerability

IBM BigFix Platform is a dynamic, content-driven messaging and management system from IBM, USA. An unauthorized access vulnerability exists in BigFix Platform versions 9.5 through 9.5.11 and 9.2 through 9.2.16, which could be exploited by an attacker to obtain information...

PT-2019-19299 · Signiant · Signiant Manager+Agents

Name of the Vulnerable Software and Affected Versions: Signiant Manager+Agents versions prior to 13.5 Description: The issue is related to a Buffer Overflow in the implementation of the set command. Recommendations: For versions prior to 13.5, update to version 13.5 or later to resolve the issue...

CVE-2019-8435

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header...

CVE-2018-19645

An Authentication Bypass issue exists in Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

CloudBees Jenkins Token Macro Plugin Multiple Denial of Service Vulnerabilities

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Token Macro Plugin is used in one of the...

UBUNTU-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

CVE-2019-2464

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2460

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...