Linux kernel memory leak vulnerability (CNVD-2019-41277)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the qrtrtunwriteiter function in net/qrtr/tun.c in versions of Linux kernel pri...

Linux kernel memory leak vulnerability (CNVD-2019-41265)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the acphwinit function in drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in versions of...

Linux kernel memory leak vulnerability (CNVD-2019-41269)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory disclosure vulnerability exists in the nfpabmu32knodereplace function in...

SQL Injection

Overview pimcore/pimcore is a content & product management framework CMS/PIM/E-Commerce. Affected versions of this package are vulnerable to SQL Injection. An attacker with limited privileges classes permission can achieve a SQL injection that can lead in data leakage. The vulnerability can be...

Command Execution Vulnerability in Siemens PLC s7-300

S7-300 is one of the programmable logic controller PLC series products produced by Siemens AG of Germany. A command execution vulnerability exists in Siemens PLC s7-300, which can be exploited by an attacker to execute malicious commands and gain administrator privileges...

TYPO3 Authorization Issue Vulnerability (CNVD-2019-41222)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. An attacker can exploit the vulnerability by sending a specially crafted...

PHPOK 5.3 suffers from a SQL Injection Vulnerability

Ltd. is a comprehensive service provider engaged in Internet planning, consulting, development and operation, dedicated to the exploration and research of the Internet market, and promote the development of e-commerce transformation of enterprises. A SQL injection vulnerability exists in PHPOK 5....

CVE-2019-4031

IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997...

OPENSUSE-SU-2019:2319-1 Security update for libopenmpt

This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlugInstrumentName and ModPlugSampleName bsc1153102. This update was imported from the SUSE:SLE-15:Update update project...

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

SilverStripe Information Disclosure Vulnerability

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and earlier versions of a security vulnerability , the vulnerabilit...

CVE-2019-17133

In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...

YCCMS v3.3 Arbitrary File Deletion Vulnerability

YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

CVE-2019-3746

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system...

OPENSUSE-SU-2019:2128-1 Security update for srt

srt was updated to version 1.3.4. Security issues fixed: CVE-2019-15784: avoid a potential array overflow. boo1148844 New binary: srt-tunnel srt-multiplexer binary is now a testing application and thus is dropped from our package. This update was imported from the openSUSE:Leap:15.1:Update update...

CVE-2019-0352

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...

CVE-2019-8447

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery CSRF vulnerability...

AdPlug Resource Management Error Vulnerability

AdPlug is an AdLib sound player library written in C++. A resource management error vulnerability exists in the Cu6mPlayer class of the u6m.h file in AdPlug version 2.3.1. No details of the vulnerability are provided at this time...

WordPress wp-google-map-plugin plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-map-plugin plugin is a Google Maps plugin used in it. A cross-site request forgery vulnerability exists in th...

Open-School SQL Injection Vulnerability

Open-School is a Web-based school management software. The software provides online fee collection, attendance and online library features. A SQL injection vulnerability exists in Open-School version 2.3 Community Edition and version 3.0, which stems from a lack of validation of externally entere...