EspoCRM Cross-Site Scripting Vulnerability (CNVD-2019-30788)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9, which can be exploited by an attacker to execute...

EspoCRM Cross-Site Scripting Vulnerability (CNVD-2020-16551)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9. The vulnerability stems from the lack of proper...

cPanel Code Execution Vulnerability (CNVD-2019-26350)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to execute arbitra...

cPanel Code Execution Vulnerability (CNVD-2019-26335)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execut...

Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-29143)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in Blink in versions of Google Chrome prior to 76.0.3809.132. A remote attacker...

CVE-2016-10858

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

MikroTik RouterOS Denial of Service Vulnerability (CNVD-2019-25984)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in Mikrotik RouterOS versions prior to 6.44.5. A remote attacker can exploit the...

Elasticsearch Competitive Conditions Issue Vulnerability

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A competitive condition issue vulnerability exists in Elasticsearch versions prior ...

PT-2019-5896 · Oniguruma +7 · Oniguruma +7

Name of the Vulnerable Software and Affected Versions: Oniguruma versions prior to 6.9.3 Description: The issue is related to uncontrolled recursion in the Oniguruma library for regular expressions. This can lead to a stack exhaustion, potentially allowing a remote attacker to cause a denial of...

CVE-2019-2873

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2867

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

UBUNTU-CVE-2019-2865

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

Redbrick Technologies Shift Information Disclosure Vulnerability (CNVD-2019-38845)

Redbrick Technologies Shift is a suite of application platforms from Redbrick Technologies, a Canadian company. The platform supports managed access to email, chat programs, network storage, and more. An information disclosure vulnerability exists in Redbrick Technologies Shift 3.4.3 and prior...

Cisco Identity Services Engine SQL Injection Vulnerability (CNVD-2019-23286)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A SQL injection vulnerabilit...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-26205)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 75.0.3770.142. An attacker can exploit the vulnerability to obtain sensitive information...

Symantec Norton Password Manager IP Address Spoofing Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. A security vulnerability exists in versions prior to Symantec Norton Password Manager 6.3.0.2082. The vulnerability can be exploited by an attacker to mask the attacker's original IP address...

DEBIAN-CVE-2019-9849

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

Libreoffice Arbitrary Code Execution Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in Document Foundation LibreOffice versions prior to 6.2.5. An attack...

Cloud Foundry UAA Authorization Issues Vulnerability

Cloud Foundry UAA is an authentication and managed service endpoint for the CloudFoundry Cloud Platform. An authorization issue vulnerability exists in Cloud Foundry UAA versions prior to v70.0. An attacker could exploit this vulnerability to impersonate another user by changing their address to...

Cloud Foundry Command Line Interface Information Disclosure Vulnerability

Cloud Foundry CLI is a command line client program for Cloud Foundry from the Cloud Foundry Foundation in the United States. An information disclosure vulnerability exists in Cloud Foundry CLI versions prior to v6.43.0. A remote attacker can exploit this vulnerability to obtain some or all user...