PT-2019-19093 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Description: A logic issue was addressed with improved validation, which may allow a malicious application to elevate privileges. Recommendations: For versions prior to 10.14.4, update to macOS Mojave 10.14.4 t...

PT-2019-19071 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Description: A use-after-free issue was addressed with improved memory management, allowing an application to potentially gain elevated privileges. Recommendations: For versions prior to 10.14.4, update to macO...

CVE-2019-18833

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure issue 2 of 2.. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An...

chromium-browser: Incorrect security UI in Omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

PT-2019-12792 · Apache · Apache Incubator Superset

Name of the Vulnerable Software and Affected Versions: Apache Incubator Superset versions prior to 0.31 Description: The issue allows a user to query database metadata information from a database they have no access to, by using a specially crafted complex query. Recommendations: For versions pri...

CVE-2019-13932

A vulnerability has been identified in XHQ All versions V6.0.0.2. The web application requests could be manipulated, causing the the application to behave in unexpected ways for legitimate users. Successful exploitation does not require for an attacker to be authenticated. A successful attack cou...

statusnet cross-site scripting vulnerability (CNVD-2020-04299)

statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in versions of statusnet prior to 0.9.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...

WordPress Custom Body Class Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site . Custom Body Class is used in which a CSS class component plug-ins . WordPress Custom Body Class 0.6.0 and previous versio...

Adobe Reader DC (Continuous) Security Updates (APSB19-55) - Windows

Adobe Reader DC Continuous is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2019-15902 · Zoho · Zoho Manageengine Applications Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions prior to 13640 Description: The issue allows for a remote authenticated SQL injection attack. This is achieved via the agentid parameter in the Agent servlet, which affects the Agent.java proces...

PT-2019-6142 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to the dname pkt copy function in the Unbound DNS server, which may allow a remote attacker to cause a denial of service due to an assertion failure when handling an invalid...

DEBIAN-CVE-2019-13756

Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2019-13741

Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content...

serialize-to-js cross-site scripting vulnerability

serialize-to-js is a package that serializes objects to strings. A cross-site scripting vulnerability exists in serialize-to-js NPM versions prior to 3.0.1. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this...

Symantec Norton Password Manager Access Control Error Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...

Decentralized Anonymous Payment System Data Forgery Issue Vulnerability

Decentralized Anonymous Payment System DAPS is a decentralized anonymous payment system. A Data Forgery Issue vulnerability exists in DAPS 2019-08-26 and prior versions, which stems from the program's use of a weak signature mechanism that can be exploited by an attacker to reuse signatures...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11930

An invalid free in mbdetectorder can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, an...

CVE-2019-11935

Insufficient boundary checks when processing a string in mberegreplace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28...

CVE-2019-11930

An invalid free in mbdetectorder can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, an...