Apple iOS Safari Unauthorized Access Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Safari is a specialized component of the Safari browser. An unauthorized access vulnerability exists in the Safari component of Apple iOS versions prior to 12.2. An attacker could use this vulnerability to acces...

Apple iOS and Apple macOS Mojave Messages Information Disclosure Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS Mojave is a specialized operating system developed for Mac computers. messages is one of the application components used to send text. photos and videos,...

Apple iOS, tvOS and macOS Mojave Siri API Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple macOS Mojave is a specialized operating system developed for Mac computers.Siri is a voice control component of it. A security vulnerability exists in the processing of command requests f...

PT-2019-4963 · Apple +6 · Icloud For Windows +13

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.2 tvOS versions prior to 12.2 watchOS versions prior to 5.2 Safari versions prior to 12.1 iTunes for Windows versions prior to 12.9.4 iCloud for Windows versions prior to 7.11 Description: A type confusion issue was...

CVE-2019-6274

Directory traversal vulnerability in storagecgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences...

WordPress WP Human Resource Management plugin has a security vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Human Resource Management plugin is a human resource management plugin used in it. A security vulnerability exists in the WordPress WP...

IBM BigFix Platform Unauthorized Access Vulnerability

IBM BigFix Platform is a dynamic, content-driven messaging and management system from IBM, USA. An unauthorized access vulnerability exists in BigFix Platform versions 9.5 through 9.5.11 and 9.2 through 9.2.16, which could be exploited by an attacker to obtain information...

DEBIAN-CVE-2018-16889

Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2019-29278)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Campus Community is one of the Campus Management PeopleSoft Enterprise C...

CVE-2019-2526

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

CVE-2019-2431

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety...

UBUNTU-CVE-2019-2553

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

UBUNTU-CVE-2019-2556

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

UBUNTU-CVE-2019-2448

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27297)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27291)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Core: AspNetCoreModule WebSocket DOS

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564...

PT-2023-3416 · Gpac +3 · Gpac +3

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the xml sax parse function. This overflow can lead to a denial of service. Recommendations: For...

ghostscript: Type confusion in setpattern (700141)

In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue...

CVE-2018-2505

SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability in storefronts that are based on the product. Fixed in versions SAP Hybris Commerce, versions 6.2, 6.3, 6.4, 6.5, 6.6, 6.7...