UBUNTU-CVE-2018-4373

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

UBUNTU-CVE-2018-4392

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2017-16775

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2019-8956 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration...

Nagios XI SQL Injection Vulnerability (CNVD-2019-10017)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A SQL injection vulnerability exists in Nagios XI versions prior to 5.5.11. The vulnerability can be exploited by an attacker to execu...

PT-2019-19435 · Nagios · Nagios Im

Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...

ArcSight Logger Information Disclosure Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. An information disclosure vulnerability exists in Micro Focus...

CVE-2019-3484

Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7...

Mozilla Firefox Same Origin Policy Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 66. An attacker can exploit the vulnerability to bypass the same-origin policy and read cross-origin images...

WebGalamb suffers from a SQL injection vulnerability

Webgalamb is a suite of newsletter and email marketing software. A SQL injection vulnerability exists in Webgalamb 7.0 and prior versions, which stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit the vulnerability to execute...

Private API Permissions Vulnerability in Google Chrome Extension

Chrome is a web browsing tool developed by Google. A privilege vulnerability exists in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit the vulnerability to launch the extension installation user interface via a crafted HTML page...

Adobe Photoshop CC Heap Corruption Vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. A heap corruption vulnerability exists in Photoshop CC versions prior to 19.1.7 and prior to 20.0.2 for Windows and macOS based platforms. A remote...

CVE-2018-19638

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files...

Dell EMC RSA Archer Information Disclosure Vulnerability (CNVD-2019-06042)

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in Dell EMC RSA Archer...

PT-2019-18163 · Cscape · Cscape

Name of the Vulnerable Software and Affected Versions: Cscape versions 9.80 SP4 and prior Description: An improper input validation issue may be exploited by processing specially crafted POC files, potentially allowing an attacker to read confidential information and remotely execute arbitrary...

CVE-2018-20025

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0...

Intel Data Center Manager SDK Local Information Disclosure Vulnerability (CNVD-2019-05274)

Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A security vulnerability exists in the uninstall routine in IntelR Data Center Manager SDK versions prior to 5.0.2, which stems...

PT-2019-18145 · Pr Electronics · Pr100088 Modbus Gateway

Name of the Vulnerable Software and Affected Versions: PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 Description: The issue allows registers used to store Modbus values to be read and written from the web interface without authentication. Recommendations: For...

CVE-2018-15588

MailMate before 1.11.3 mishandles a suspicious HTML/MIME structure in a signed/encrypted email...

CVE-2018-20252

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user...