CVE-2019-1010234

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is:...

Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2019-24196)

PhantomPDF is a multifunctional PDF editor. A denial of service vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11 when calling the clone function. The vulnerability stems from an infinite loop caused by an obfuscation of the relationship between the factor object and the parent...

Redbrick Technologies Shift Information Disclosure Vulnerability (CNVD-2019-38845)

Redbrick Technologies Shift is a suite of application platforms from Redbrick Technologies, a Canadian company. The platform supports managed access to email, chat programs, network storage, and more. An information disclosure vulnerability exists in Redbrick Technologies Shift 3.4.3 and prior...

Cisco Identity Services Engine SQL Injection Vulnerability (CNVD-2019-23286)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A SQL injection vulnerabilit...

UBUNTU-CVE-2019-2737

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-26205)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 75.0.3770.142. An attacker can exploit the vulnerability to obtain sensitive information...

Symantec Norton Password Manager IP Address Spoofing Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. A security vulnerability exists in versions prior to Symantec Norton Password Manager 6.3.0.2082. The vulnerability can be exploited by an attacker to mask the attacker's original IP address...

CVE-2019-1942

A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An...

DEBIAN-CVE-2019-9849

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

CVE-2019-9849

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

Libreoffice Arbitrary Code Execution Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in Document Foundation LibreOffice versions prior to 6.2.5. An attack...

Linaro OP-TEE Digit Error Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. An attacker could exploit this vulnerability to disclose passwords and/or data from a previous Trusted Application...

Facebook WhatsApp Input Verification Error Vulnerability

Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, and more. An input validation error...

Delta Industrial Automation CNCSoft Denial of Service Vulnerability

Delta Electronics Delta Industrial Automation CNCSoft is a set of CNC machine simulation system software from Delta Electronics, Taiwan, China. A denial of service vulnerability exists in Delta Electronics Delta Industrial Automation CNCSoft ScreenEditor versions prior to 1.00.84, which stems fro...

Cloud Foundry Command Line Interface Information Disclosure Vulnerability

Cloud Foundry CLI is a command line client program for Cloud Foundry from the Cloud Foundry Foundation in the United States. An information disclosure vulnerability exists in Cloud Foundry CLI versions prior to v6.43.0. A remote attacker can exploit this vulnerability to obtain some or all user...

PT-2019-2843 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL Server. It can be exploited by a remote attacker to cause the system to hang or partially fail. A...

PT-2019-16494 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized update, insert, or delete...

Cloud Foundry UAA Authorization Issues Vulnerability

Cloud Foundry UAA is an authentication and managed service endpoint for the CloudFoundry Cloud Platform. An authorization issue vulnerability exists in Cloud Foundry UAA versions prior to v70.0. An attacker could exploit this vulnerability to impersonate another user by changing their address to...

July 16, 2019—KB4507437 (Preview of Monthly Rollup)

None None...

CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version...