EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1...

Arbitrary file deletion

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade...

CVE-2019-3805

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate a...

Sony Smart TVs Information Disclosure Vulnerability

Sony Smart Tvs are smart TV products from Sony Japan. A log information disclosure vulnerability exists in Sony Smart Tvs. The vulnerability originates from the abnormal output of log files from a networked system or product. An attacker could exploit this vulnerability to obtain sensitive...

USN-3914-2 ntfs-3g update

USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary. Original advisory details: A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local...

Code execution vulnerability in HadSky Light Forum system (CNVD-2019-14572)

HadSky Light Forum System is a free and open forum system for individual users. A code execution vulnerability exists in the HadSky Light Forum System, which can be exploited by an attacker to gain control of the web server...

Heilongjiang Yitong Network Technology Development Co., Ltd. website building system has SQL injection vulnerability

Heilongjiang Yitong Network Technology Development Co., Ltd. is an enterprise website building system. There is a SQL injection vulnerability in Heilongjiang Yitong Network Technology Development Co., Ltd. that can be exploited by attackers to obtain sensitive information from the database...

Android Permission License and Access Control Vulnerability (CNVD-2019-09144)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in System in Android, which arises from a lack of effective privilege permission and access control measures in a networked system o...

Directory Traversal Vulnerability in NetSoft Zhicheng Classifieds Website System

NetSoft Zhicheng classifieds website system is a php mysql based website building system. NetSoft Zhicheng classifieds website system has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information...

RockOA SQL Injection Vulnerability

ROCKOA Xinhuo office system is a free and open source OA collaborative office system for small and medium-sized enterprises. RockOA 1.8.7 SQL injection vulnerability exists. The vulnerability stems from the webmain/webmainAction.php publictreestore method using the pidfields and idfields paramete...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-23322)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker could use this vulnerability to potentiall...

Google Android System Information Disclosure Vulnerability (CNVD-2019-10468)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

S-CMS Enterprise Website Builder System se***.php page suffers from SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the se.php page of the S-CMS enterprise website builder system. An attacker can use the...

Denial of Service Vulnerability in Telecommunications Science and Technology First Research Institute In-Vehicle Surveillance System

The First Institute of Telecommunications Science and Technology hereinafter referred to as "Telecom One" is a national professional research institute in the field of communications in China, and is now one of the core enterprises of the Institute of Telecommunications Science and Technology ITS...

GHSA-P9PM-55VP-2JQW Downloads Resources over HTTP in soci

Affected versions of soci insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

Eclipse OpenJ9 Input Validation Error Vulnerability

clipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. An input validation error vulnerability exists in Eclipse OpenJ9 version 0.11.0, which arises from a networked system or product that does not properly validate input...

CVE-2019-7249

CVE-2019-7249 affects Keybase on macOS prior to version 2.12.6. The vulnerability arises in the move RPC to the Helper, described as a time-to-check-time-to-use issue that could allow a user without root to tamper with another user's installations. NVD metrics indicate a high/critical impact (CVS...

Unspecified Vulnerability in Oracle Hospitality Cruise Shipboard Property Management System (CNVD-2019-38551)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

CVE-2019-2409

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the...

Information Disclosure

X.Org X11 server is vulnerable to information disclosure. A local user who is plugged into a new device but has switched to a different session will be able to obtain confidential information such as reading passwords from a tty. This allows physically proximate attackers to retrieve sensitive...