Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07225)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

Unspecified Vulnerability in Apple iOS File Provider

Apple iOS is an operating system developed by Apple for mobile devices, and File Provider is one of the inter-application file sharing components. A security vulnerability exists in the File Provider component in Apple iOS versions prior to 12.1.1. The vulnerability can be exploited by an attacke...

Google Android elevation of privilege vulnerability (CNVD-2019-01567)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An arbitrary memory release vulnerability exists in the reallyinstallpackage of install.cpp in Google Android 7.0, 7.1.1, and 7.1.2. A local attacker can exploit this...

IBM i2 Enterprise Insight Analysis Information Disclosure Vulnerability

IBM i2 Enterprise Insight Analysis is a suite of data analytics and integration solutions from IBM USA. The product is characterized by interoperability and scalability. An information disclosure vulnerability exists in IBM i2 Enterprise Insight Analysis version 2.1.7, which originates from the...

Apple iOS, macOS Mojave and tvOS Kernel Denial of Service Vulnerability

Apple iOS, macOS Mojave, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS Mojave is a specialized operating system for Mac computers; and tvOS is an operating system for smart televisions. kernel is one of the Kernel is one of the kernel components. A...

CVE-2018-1941

IBM Campaign 9.1.0 and 9.1.2 could allow a local user to obtain admini privileges due to the application not validating access permissions. IBM X-Force ID: 153382...

DEBIAN-CVE-2018-19841

The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service out-of-bounds read and application crash via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack...

WavPack Denial of Service Vulnerability (CNVD-2019-06791)

WavPack is an open source, free audio lossless compression software. A security vulnerability exists in the 'WavpackPackInit' function in the packutils.c file of the libwavpack.a static link library in WavPack 5.1.0 and earlier versions. An attacker can exploit this vulnerability to cause a denia...

Apple iOS FaceTime Denial of Service Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. FaceTime is a video calling program. A security vulnerability exists in the FaceTime component of Apple iOS versions prior to 12.1. A remote attacker can exploit this vulnerability to cause a memory leak memory corruption...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

Apple iOS VoiceOver has an unspecified vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which VoiceOver is a voice-assisted component. A security vulnerability exists in the VoiceOver component in Apple iOS versions prior to 12.1. A local attacker could exploit the vulnerability to view photos on a locke...

Apple iOS Messages UI Spoofing Vulnerability (CNVD-2018-26504)

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is a component of the application used to send text, photos and videos. A security vulnerability exists in the Messages component in Apple iOS versions prior to 12.1. The vulnerability can be exploited by an...

UBUNTU-CVE-2018-4386

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

Apple iOS Messages UI Spoofing Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is a component of the application used to send text, photos and videos. A security vulnerability exists in the Messages component in Apple iOS versions prior to 12.1. The vulnerability can be exploited by an...

Apple iOS WebKit Address Bar Spoofing Vulnerability

Apple iOS is the United States Apple Apple company for mobile devices developed by a set of operating systems. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine, currently used by Apple Safari and Google Chrome and other...

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite and SIMATIC IT UA Discrete Manufacturing License Issue Vulnerabilities

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite, and SIMATIC IT UA Discrete Manufacturing are products of Siemens, Germany.Siemens SIMATIC IT LMS is a line monitoring system for overall equipment effectiveness OEE. Siemens SIMATIC IT LMS is a line monitoring system for Overall Equipment...

SAP BusinessObjects Business Intelligence Platform BI CMC Security Bypass Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product has a report generation, analysis, data visualization, etc. BI CMC is one of the central management console program. A security...

Microsoft Team Foundation Server Code Execution Vulnerability

Microsoft Team Foundation Server is a source code management, project management and team collaboration platform within the Application Lifecycle Management ALM suite of tools from Microsoft. The platform helps teams collaborate more flexibly and effectively and deliver high-quality software more...

UBUNTU-CVE-2018-8416

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1...

SQL Injection Vulnerability in MetInfo 6.1.3

MetInfo is a content management system developed using PHP and Mysql. A SQL injection vulnerability exists in MetInfo 6.1.3, which can be exploited by attackers to obtain sensitive information...