CVE-2019-5227

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...

Arbitrary File Write

Overview Versions of iobroker.admin prior to 3.6.12 are vulnerable to Path Traversal. The package fails to restrict access to folders outside of the intended folder in the /log/ route, which may allow attackers to include arbitrary files in the system. An attacker would need to be authenticated t...

Pi-Hole Operating System Command Injection Vulnerability

Pi-Hole is a web-grade ad-blocking application. An operating system command injection vulnerability exists in Pi-Hole version 4.3. The vulnerability arises when a network system or product fails to properly filter special characters, commands, etc. during the construction of executable operating...

Code injection

IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271...

SQL Injection Vulnerability in ezEIP Enterprise Website Management System

ezEIP Enterprise Website Management System is a CMS software i.e. Content Management System for building enterprise-level websites produced by Wando. A SQL injection vulnerability exists in the ezEIP Enterprise Website Management System. An attacker can exploit the vulnerability to obtain sensiti...

Code injection

lux through 5.2.2 a chain-based proof-of-stake cryptocurrency allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk...

PT-2020-9824 · Otrs +2 · Otrs +2

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.0.x through 7.0.11 Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.37 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.22 Description: An issu...

CVE-2019-10465

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file syste...

CVE-2019-17526

An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facing web application. Malicious actors can execute arbitrary commands on the underlying operating system, as demonstrated by an import'os'.popen'whoami'.read...

SQL injection vulnerability exists in the website building system ne***_in***.asp of Suqian Zhanhong Network Technology Co.

Suqian Zhanhong Network Technology Co., Ltd. is Suqian a provide website construction, web design, web production, network promotion, electronic sample production professional services company. There is a SQL injection vulnerability in the website building system nein.asp of Suqian Zhanhong Netwo...

CVE-2019-11528

CVE-2019-11528 affects Softing uaGate SI 1.60.01. The issue is that a system default path for executables is user-writable, allowing an attacker to modify or add executables in that path. No remediation details are provided in the connected documents. If exploiting details are present, they are n...

Security Bulletin: Vulnerability in Apache Commons BeanUtils affect IBM Spectrum LSF Suite and Spectrum LSF Application Center

Summary There is vulnerability in Apache Commons BeanUtils used by IBM Spectrum LSF Suite and Spectrum LSF Application Center. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: Apache Commons Beanutils could allow a remote attacker to gain unauthorized access to the system, caused by the...

Design/Logic Flaw

IBM Financial Transaction Manager FTM for Multi-Platform MP v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 through 3.0.0.8 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request...

Tianjin Qipeng Technology Development Co., Ltd. website building system backstage existence of universal password login vulnerability

Tianjin Qipeng Technology Development Co., Ltd. is a main website construction web port company. A universal password login vulnerability exists in the website building system of Tianjin Qipeng Technology Development Co. Attackers can use this vulnerability to log in the background, obtain...

Remote Code Execution

nexus-yum-repository-plugin is vulnerable to remote code execution. An attacker with administrative access to nxrm is able to execute arbitrary OS commands on the system by setting the path of createrepo or mergerepo to an OS command in the XML input...

Google Android Code Execution Vulnerability (CNVD-2019-40997)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A code execution vulnerability exists in System in Android. An attacker can exploit this vulnerability to execute code...

Google Android Denial of Service Vulnerability (CNVD-2019-37160)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Denial of Service Vulnerability (CNVD-2019-37167)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Denial of Service Vulnerability (CNVD-2019-37169)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Denial of Service Vulnerability (CNVD-2019-37159)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in System in Android Q. An attacker can exploit this vulnerability to cause a denial of service...