PT-2019-9860 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab CE/EE versions 8.6 up to 11.3.10 Gitlab CE/EE versions 11.4 up to 11.4.7 Gitlab CE/EE versions 11.5 up to 11.5.0 Description: The issue concerns an incorrect access control vulnerability. This vulnerability can display the title and...

MailEnable Enterprise Premium Access Control Error Vulnerability

MailEnable Enterprise Premium is a suite of POP3 and SMTP mail servers from MailEnable Australia. An Access Control Error vulnerability exists in MailEnable Enterprise Premium version 10.23. The vulnerability arises from a network system or product that does not properly restrict access to...

CVE-2019-5974

Cross-site request forgery CSRF vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2018-14861

Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users...

HPESBHF03943 rev.1 - Certain HPE Servers using AMD EPYC 7001 series Processors, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server All versions prior to v1.44 6/24/2019 HPE ProLiant DL325 Gen10 Server All versions prior to v1.44 6/24/2019 CVSS Scores: | CVE | CVSS Vector ...

PT-2019-17016 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 10.5 Description: A remote attacker could upload arbitrary files, potentially allowing the execution of arbitrary code on the vulnerable web server. Recommendations: For IBM Security Guardium version 10.5, update...

USN-4043-1 python-django vulnerabilities

It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10 and Ubuntu 19.04. CVE-2019-12308 Gavin Wahl discovered that Django incorrectly handled HTTP detection when...

CVE-2018-14885

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds...

McAfee Enterprise Security Manager Command Injection Vulnerability (CNVD-2019-21255)

McAfee Enterprise Security Manager ESM is a suite of security information and event management SIEM solutions from McAfee, USA. The solution supports viewing and analyzing threat intelligence as well as rapid threat prioritization and security response, and has a built-in embedded compliance...

Red Hat CloudForms Cross-Site Scripting Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. A cross-site scripting vulnerability exists in the PDF export module ...

June 27, 2019—KB4509475 (OS Build 14393.3056)

None None...

Intel Chipset Device Software Elevation of Privilege Vulnerability

Intel Chipset Device Software is a chipset firmware update utility from Intel Corporation USA. A security vulnerability exists in the installer in Intel Chipset Device Software INF Update Utility versions prior to 10.1.1.45. A local attacker can exploit the vulnerability to elevate privileges...

Compatibility update for installing Windows 10, version 1903: June 27, 2019

None None...

June 26, 2019—KB4509476 (OS Build 15063.1898)

None None...

June 26, 2019—KB4509477 (OS Build 16299.1239)

None None...

Samba code issue vulnerability (CNVD-2019-19049)

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A code issue vulnerability...

Red Hat CloudForms Access Control Error Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. An access control error vulnerability exists in Red Hat CloudForms...

Samba Code Problem Vulnerability

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A code issue vulnerability...

USN-4019-1 sqlite3 vulnerabilities

It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2017-2518, CVE-2017-2520 It was discovered that SQLite incorrectly handled certain...

ALPINE-CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...