Google Android System Buffer Overflow Vulnerability (CNVD-2019-39715)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Bluetooth in Android version 10. An attacker can exploit the vulnerability to elevate privileges...

Google Android System Buffer Overflow Vulnerability (CNVD-2019-39717)

ndroid is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA for short. A buffer overflow vulnerability exists in wifilogd in Android version 10, which stems from a lack of boundary checking in the program. An attacker could exploit the vulnerability to...

Cybozu Garoon SQL Injection Vulnerability (CNVD-2019-29157)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A SQL injection vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.3, which can be exploited by...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38563)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android System Null Pointer Dereference Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Bluetooth is one of the Bluetooth components. A security vulnerability exists in Bluetooth in Android version 10. An attacker could exploit this vulnerability to cause a denial of servi...

Google Android Information Disclosure Vulnerability (CNVD-2019-34475)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Android 10 version of the Package Manager service there is an information leakage vulnerability, the vulnerability stems from the network system or product in the operation of the process of...

Google Android Framework Path Traversal Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A path traversal vulnerability in GoogleContactsSyncAdapter in Android version 10, which stems from a failure of a networked system or...

CVE-2019-11522

OX App Suite 7.10.0 to 7.10.2 allows XSS...

August 20, 2019 — KB4511518 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607

None None...

August 20, 2019 — KB4512192 Cumulative Update for .NET Framework 3.5, 4.7.2, 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

August 20, 2019 — KB4511520 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709

None None...

August 17, 2019—KB4512495 (OS Build 14393.3181)

None None...

August 16, 2019—KB4512494 (OS Build 16299.1365)

None None...

WordPress wp-google-map-plugin plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-map-plugin plugin is a Google Maps plugin used in it. A cross-site request forgery vulnerability exists in th...

Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability (CNVD-2019-44785)

Huawei Honor10 Lite and Huawei Y9 are both a smartphone from Chinese company Huawei Huawei. A denial-of-service vulnerability exists in Huawei Honor10 Lite Harry-AL00C before 9.1.0.217 C00E215R3P1 and Huawei Y9 Jackman-L23 before 9.1.0.220 C45E3R1P1T8, which can be exploited to cause a dead loop...

SUSE-SU-2019:2118-1 Security update for mariadb-100

This update for mariadb-100 to version 10.0.38 fixes the following issues: - CVE-2019-2537: Fixed a denial of service vulnerability which can lead to MySQL compromise bsc1136037. - CVE-2019-2529: Fixed a denial of service vulnerability by an privileged attacker via a protocol compromise bsc113603...

Frappe Technologies Frappe Framework Injection Vulnerability

Frappe Technologies Frappe Framework is a metadata-driven full-stack web application framework based on Python and JavaScript from Frappe Technologies, India. An injection vulnerability exists in Frappe Technologies Frappe Framework versions 10 through 12 fixed in version 12.0.4. No detailed...

Compatibility update for installing Windows 10, version 1809: August 13, 2019

None None...

Frappe Technologies Frappe Framework Cross-Site Scripting Vulnerability

Frappe Technologies Frappe Framework is a metadata-driven full-stack web application framework based on Python and JavaScript from Frappe Technologies, India. A cross-site scripting vulnerability exists in Frappe Technologies Frappe Framework version 10, version 11 before 11.1.46, and version 12,...

Frappe Technologies Frappe Framework SQL Injection Vulnerability

Frappe Technologies Frappe Framework is a metadata-driven full-stack web application framework based on Python and JavaScript from Frappe Technologies, India. A SQL injection vulnerability exists in Frappe Technologies Frappe Framework versions 10 through 12, which can be exploited by an attacker...