Code injection

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link...

CVE-2019-1020017

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP...

CVE-2019-1020017

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP...

Code injection

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP...

CVE-2019-1020017

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP...

CVE-2019-1020017

CVE-2019-1020017 affects Discourse prior to 2.3.0 and 2.4.x prior to 2.4.0.beta3, where logging in via a user-api OTP lacks a confirmation screen. The vulnerability originates from improper flow gating during OTP-based login, enabling potential unintended access without explicit user confirmation...

CVE-2019-1020017: Undefined Security Weakness

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP...

CVE-2019-1020018: Improper Authentication

Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link...

CVE-2019-3621

Authentication protection bypass vulnerability in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker require...

New Android Spyware Created by Russian Defense Contractor Found in the Wild

Cybersecurity researchers have uncovered a new piece of mobile surveillance malware believed to be developed by a Russian defense contractor that has been sanctioned for interfering with the 2016 U.S. presidential election. DubbedMonokle , the mobile remote-access trojan has been actively targeti...

CVE-2019-3621: Undefined Security Weakness

Authentication protection bypass vulnerability in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker require...

CVE-2019-10992

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files...

CVE-2019-10982

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying...

Astra Linux Screen Lock Bypass

The vulnerability of the Astra Linux operating system is related to deficiencies in the screen locking mechanism. Exploiting this vulnerability could allow a hacker to bypass the screen lock and gain access to execute code under the identity of the user who entered the system...

Security update for neovim (important)

openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1796-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

Crestron 21.5" HD Touch Screen Display

Binary data 764821.prm...

Delta Industrial Automation CNCSoft Denial of Service Vulnerability

Delta Electronics Delta Industrial Automation CNCSoft is a set of CNC machine simulation system software from Delta Electronics, Taiwan, China. A denial of service vulnerability exists in Delta Electronics Delta Industrial Automation CNCSoft ScreenEditor versions prior to 1.00.84, which stems fro...

Unauthorized access vulnerability exists in the touch screen version of the cloud platform of VR Visualization Intelligent Interactive Teaching of One100

Phoenix Chuangyi software development teaching and training software, providing vivid image of three-dimensional interactive teaching, for the construction of high-quality professional schools, innovative teaching mode and teaching content to provide a powerful support platform. Chuangyi 100VR...

fly-wm Astra Linux Confidential Data Access

The vulnerability of the fly-wm window manager in the Astra Linux operating system is related to errors in the algorithm for calculating permissions when changing the size of the window of the built-in screen locker. This allows confidential data to be displayed in a virtual machine or in an...

PT-2019-2572

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to errors in the algorithm for recalculating resolution when changing the window size of the built-in screen locker in the fly-wm window manager of Astra Linux. This...