CVE-2015-9462

CVE-2015-9462 concerns the WordPress plugin awesome-filterable-portfolio (before 1.9). The vulnerability is an SQL injection in the function afp_get_new_category_page, exploitable via the cat_id parameter. The issue is documented across multiple sources (NVD entry referencing the same function an...

CVE-2015-9462

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afpgetnewcategorypage SQL injection via the catid parameter...

CVE-2015-9461

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afpgetnewportfolioitempage SQL injection via the itemid parameter...

CVE-2015-9462: Improper Neutralization of Special Elements used in an SQL Command

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afpgetnewcategorypage SQL injection via the catid parameter...

CVE-2015-9461: Improper Neutralization of Special Elements used in an SQL Command

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afpgetnewportfolioitempage SQL injection via the itemid parameter...

PT-2019-7421

Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to SQL injection via the cat id parameter in the afp get new category page function. This allows for potential exploitation. No information is provided...

PT-2019-7420

Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to a SQL injection vulnerability via the item id parameter in the afp get new portfolio item page function. This allows for potential exploitation...

CVE-2019-14208

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

CVE-2019-14208

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

Null pointer dereference

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

CVE-2019-14208

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

CVE-2019-14208: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

The vulnerability of the eLearning Server 4G system regarding access control allows a hacker to gain access and modify the user’s portfolio.

The vulnerability of the eLearning Server 4G system management and development framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access—and modify—user portfolios by altering the value of the user identifier in HTTP request...

CVE-2019-2701

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2019-2701

CVE-2019-2701 affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Web Access in the Primavera P6 EPPM component. The vulnerability is present in the 18.8 release and allows a low-privilege, unauthenticated or weakly authenticated attacker with network access over HTTP to re...

PT-2019-16439

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management version 18.8 Description The issue affects the Web Access subcomponent, allowing a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfoli...

CVE-2019-2701: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

Cross-site Scripting (XSS)

The Portfolio publisher servlet in the demo web application in Apache ActiveMQ is vulnerable to cross-site scripting XSS. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the refresh parameter in demo/portfolioPublish...

Announcing Microsoft Defender ATP for Mac and new Threat and Vulnerability Management capabilities

On February 28, 2019, we announced Microsoft Threat Experts, a new managed hunting service within the Microsoft 365 Security portfolio that enables customers to extend their expertise and insights with the help of Microsoft security professionals. This release showcased our philosophy that securi...

Lenovo Watch X Riddled with Security Vulnerabilities

Researchers are raking the Lenovo Watch X over the security coals in a report that blasts the device for shipping with a half dozen “disturbing” privacy and security vulnerabilities. The budget $50 smartwatch was introduced in June 2018 and was initially praised for its design, features and...