WordPress Custom Body Class Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site . Custom Body Class is used in which a CSS class component plug-ins . WordPress Custom Body Class 0.6.0 and previous versio...

DEBIAN-CVE-2019-13756

Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Symantec Norton Password Manager Access Control Error Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...

Decentralized Anonymous Payment System Data Forgery Issue Vulnerability

Decentralized Anonymous Payment System DAPS is a decentralized anonymous payment system. A Data Forgery Issue vulnerability exists in DAPS 2019-08-26 and prior versions, which stems from the program's use of a weak signature mechanism that can be exploited by an attacker to reuse signatures...

TitanHQ WebTitan has an unspecified vulnerability (CNVD-2019-44523)

TitanHQ WebTitan is a web content filter from TitanHQ Ireland. A security vulnerability exists in TitanHQ WebTitan versions prior to 5.18. An attacker can exploit the vulnerability to execute arbitrary code as root...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2020-01179)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A memory misreference vulnerability exists in Mozilla Firefox versions prior to ...

Elevation of Privilege Vulnerability in Multiple Mozilla Products

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Linux kernel information leakage vulnerability (CNVD-2019-46992)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An information leakage vulnerability exists in Linux kernel versions prior to 5.3.4. An attacker can exploit this...

Buffer overflow vulnerability in multiple Mozilla products (CNVD-2020-03240)

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

phpLDAPadmin Local File Inclusion Vulnerability

phpLDAPadmin is a web-based LDAP client which is mainly used to manage LDAP servers. A local file inclusion vulnerability exists in the way the 'Accept-Language' HTTP header value is handled in versions of phpLDAPadmin prior to 0.9.8, which can be exploited by a remote attacker to cause a denial ...

ProFTPD License Issue Vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. An authorization issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and prior versions. The vulnerability ste...

DEBIAN-CVE-2013-7484

Zabbix before 5.0 represents passwords in the users table with unsalted MD5...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-42756)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 75.0.3770.142. The vulnerability stems from the system's mismanagement of resources such as memory. A remote attacker can exploit the vulnerability to cause heap...

cPanel code issue vulnerability (CNVD-2020-58052)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A code issue vulnerability exists in cPanel versions prior to 82.0.15. The vulnerability stems from an improperly design...

Linux kernel memory leak vulnerability (CNVD-2019-41716)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'cryptoreportstat' function in the crypto/cryptouserstat.c file in Linux kernel 5.3.11 and earlier versions. An attacke...

Foxit Reader Denial of Service Vulnerability (CNVD-2019-41608)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7. An attacker could exploit this vulnerability to cause a denial of service...

Intel Graphics Driver Input Validation Error Vulnerability

Intel Graphics Driver is the Intel graphics card driver. An input validation error vulnerability exists in the API in versions prior to Intel Graphics Driver 26.20.100.7209. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-11931

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions...

PT-2019-6589 · Poppler · Poppler

Name of the Vulnerable Software and Affected Versions: poppler versions prior to 0.16.3 Description: The issue is related to an integer overflow condition that occurs when parsing CharCodes for fonts. Recommendations: For versions prior to 0.16.3, update to version 0.16.3 or later to resolve the...

PT-2019-4046 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 25.20.100.6519 Description: The issue is related to insufficient input validation in the Kernel Mode module of the Intel Graphics Driver. This can potentially allow an authenticated user to cause a deni...