Unspecified Vulnerability in IBM Security Directory Server

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists in IBM Security Directory...

Fujitsu Wireless Keyboard Set LX390 Password Problem Vulnerability

The Fujitsu Wireless Keyboard Set LX390 is a wireless keyboard from Fujitsu Japan. A security vulnerability exists in the Fujitsu Wireless Keyboard Set LX390 GK381, which arises from the program not properly encrypting 2.4 communications. An attacker could exploit this vulnerability to conduct a...

Centreon Operating System Command Injection Vulnerability

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A security vulnerability exists in Centreon version 19.04. An attacker can use this...

UBUNTU-CVE-2019-2894

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-4031

IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997...

CVE-2019-17318

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by a Regular user...

PT-2019-15080 · Sugarcrm · Sugarcrm

Name of the Vulnerable Software and Affected Versions: SugarCRM versions prior to 8.0.4 SugarCRM versions 9.x prior to 9.0.2 Description: The issue allows PHP object injection in the UpgradeWizard module by an Admin user. Recommendations: For SugarCRM versions prior to 8.0.4, update to version...

CVE-2019-4539

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812...

PT-2019-7369 · Blubrry · Blubrry Powerpress Podcasting Plugin

Name of the Vulnerable Software and Affected Versions: Blubrry PowerPress Podcasting plugin version 6.0.4 Description: The issue is related to a cross-site scripting XSS vulnerability. It occurs via the tab parameter. There is no information provided about the estimated number of potentially...

CVE-2019-16759

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfigcode parameter in an ajax/render/widgetphp routestring request...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-32344)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in AccessLogFilter in Atlassian Jira versions prior to 8.4.0, which can be...

Atlassian Jira Server-Side Request Forgery Vulnerability (CNVD-2019-32327)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A server-side request forgery vulnerability exists in the /plugins/servlet/gadgets/makeRequest resource in versions of Atlassian Jira prior to 8.4.0, which can be exploit...

PT-2019-19049 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. This is relate...

WordPress easy-property-listings plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-property-listings is a real estate website builder plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress insta-gallery plugin operates as authorized vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. insta-gallery is a plugin for displaying personal social networks. A security vulnerability exists in WordPress insta-gallery plugin...

CVE-2019-4536

IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...

IBM i Privilege Vulnerability

IBM i is an American IBM operating system running in IBM Power Systems and IBM PureSystems based on the EBCDIC code. An elevation vulnerability exists in IBM i version 7.4 configured with Db2 Mirror for i, which can be exploited by an attacker to gain elevated privileges...

X3.4 suffers from arbitrary file reading vulnerability

Discuz! is a general-purpose community forum software system. X3.4 has an arbitrary file reading vulnerability that can be exploited by attackers to read file information...

PT-2019-13687 · Veritas · Veritas Resiliency Platform

Name of the Vulnerable Software and Affected Versions: Veritas Resiliency Platform versions prior to 3.4 HF1 Description: An issue allows a user with sufficient privileges to overwrite any file in the virtual machine through a directory traversal vulnerability when uploading an application bundle...

Apple iOS, Apple tvOS and watchOS Core Data Component Resource Management Error Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. core data is one of the frameworks used to manage the model layer objects in an application. A resource management error vulnerability exists ...