Electronic Arts Origin elevation of privilege vulnerability (CNVD-2020-04279)

Electronic Arts Origin is a game management platform from Electronic Arts. The platform includes features such as electronic software distribution, digital rights management, and a social networking system. A security vulnerability exists in Electronic Arts Origin 10.5.x and prior versions. An...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

PT-2019-17139 · Ibm · Ibm Db2 High Performance Unload

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5 Description: The issue is caused by an untrusted search path vulnerability, allowing a local attacker to execute arbitrary code on the system. An attacker could exploit thi...

SMPlayer Buffer Overflow Vulnerability (CNVD-2019-45407)

SMPlayer is a cross-platform open source multimedia player. A buffer overflow vulnerability exists in SMPlayer version 19.5.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

VMware Workstation and VMware Fusion Denial of Service Vulnerability (CNVD-2020-41588)

VMware Workstation is a desktop virtual computing software from VMware with Windows and Linux versions. VMware Fusion is a virtual machine hypervisor developed by VMware for Macintosh computers. A denial of service vulnerability exists in the RPC handler in VMware Workstation version 15.x prior t...

IrfanView Buffer Overflow Vulnerability (CNVD-2019-42233)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in rfanView version 4.53. The vulnerability stems from a networked system or product tha...

CVE-2019-3420

All versions up to V2.5.0EG1T5TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

TYPO3 Authorization Issue Vulnerability (CNVD-2019-41222)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. An attacker can exploit the vulnerability by sending a specially crafted...

CVE-2019-8088

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-36989)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and prior versions. The...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36627)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A cross-site scripting vulnerability exists in the web-based...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36628)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A cross-site scripting vulnerability exists in the web-based...

CVE-2019-4031

IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997...

Adobe Experience Manager Reflective Cross-Site Scripting Vulnerability (CNVD-2019-37130)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A reflected cross-site scripting vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, and 6.5. An attacker can exploit this...

Kirona Solutions Dynamic Resource Scheduling Information Disclosure Vulnerability

Kirona Solutions Dynamic Resource Scheduling DRS is a suite of dynamic resource scheduling software for field services from Kirona Solutions, UK. A security vulnerability exists in Kirona DRS version 5.5.3.5. The vulnerability can be exploited by an attacker to obtain SQL database information suc...

IBM Security Guardium Authorization Issues Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security Guardium...

CVE-2019-17124

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control...

CVE-2019-17246

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c...

CVE-2019-17132

vBulletin through 5.5.4 mishandles custom avatars...

PT-2019-11104 · Apc · Apc Ups Network Management Card 2

Name of the Vulnerable Software and Affected Versions: APC UPS Network Management Card 2 AOS version 6.5.6 Description: A Credentials Management issue exists, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled and then disabled...