CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

HPE Moonshot Provisioning Manager Remote Security Restriction Bypass Vulnerability

PE Moonshot Provisioning Manager is an application for managing HPE Moonshot systems from Hewlett Packard Enterprise HPE, USA. A remote security restriction bypass vulnerability exists in HPE Moonshot Provisioning Manager versions prior to 1.24, which can be exploited by remote attackers to bypas...

CA API Developer Portal Cross-Site Scripting Vulnerability (CNVD-2018-17503)

CA API Developer Portal is a set of CA's API Application Programming Interface query function for software developers. A cross-site scripting vulnerability exists in CA API Developer Portal version 4.x, versions prior to 4.2.5.3, and versions prior to 4.2.7.1, which originates when the program...

UBUNTU-CVE-2018-4264

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

UBUNTU-CVE-2018-4263

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

PT-2018-16195 · Salesforce · Restforce

Name of the Vulnerable Software and Affected Versions: restforce versions prior to 3.0.0 Description: The issue is related to insufficient URI encoding, allowing an attacker to inject arbitrary parameters into Salesforce API requests. This flaw is only exploitable in applications that pass user...

PT-2018-17654 · Ca · Ca Api Developer Portal

Name of the Vulnerable Software and Affected Versions: CA API Developer Portal versions prior to 4.2.5.3 and prior to 4.2.7.1 Description: The issue is related to an unspecified reflected cross-site scripting vulnerability. Recommendations: For versions prior to 4.2.5.3, update to version 4.2.5.3...

Google Chrome Extensions Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 71.0.3578.80. A remote attacker can exploit the vulnerability to access files on the local file system with the hel...

SeedDMS SQL Injection Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is SeedDMS enthusiasts jointly developed a set of PHP and MySql-based open source document management system . The system is mainly used to store and share documents. A SQL injection vulnerability exists in the 'Users management' feature in SeedDMS...

Micro Focus GroupWise Arbitrary File Upload Vulnerability

Micro Focus GroupWise is a collaborative communications system from Micro Focus UK. The system provides collaborative communication services such as e-mail, scheduling, instant messaging, task management, document management, and contact management. A security vulnerability exists in the...

Apple iOS, tvOS and watchOS Kernel Local Information Disclosure Vulnerability

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is one of the kernel components. A security vulnerability exists in the Kernel componen...

DEBIAN-CVE-2016-8628

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as...

LOGICOOL Game Software untrustworthy search path vulnerability

LOGICOOL Game Software is a set of game device management software from the Swedish company LOGICOOL. The software is used to manage devices such as mice, keyboards, headsets and speakers. An untrusted search path vulnerability exists in LOGICOOL Game Software versions prior to 8.87.116, which ca...

chromium-browser: Cross origin information disclosure in Service Workers

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

chromium-browser: Same origin policy bypass in WebAudio

Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

chromium-browser: Cross origin information leak in Blink

Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2018-1525

Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.6.2.0 Description A Permissions, Privileges, and Access Control issue exists, allowing unauthorized users to decode passwords using a rainbow table. This could enable a remote attacker to exploit the...

DEBIAN-CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

Cisco SD-WAN Solution Local Command Injection Vulnerability

Cisco vBond Orchestrator Software are products of Cisco. vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A command injection...

Google Chrome extension installation privilege bypass vulnerability

Google Chrome is a web browser developed by Google, Inc. extension installation is one of the plug-in installation program. A security vulnerability exists in extension installation in Google Chrome versions prior to 68.0.3440.75. A remote attacker can exploit this vulnerability to bypass the...