PT-2019-4078 · Postgresql +5 · Postgresql +5

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5.x up to, excluding 9.5.17 PostgreSQL versions 9.6.x up to, excluding 9.6.13 PostgreSQL versions 10.x up to, excluding 10.8 PostgreSQL versions 11.x up to, excluding 11.3 Description: The issue is related to an error in...

Apple macOS Mojave APFS Component Code Execution Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component of Apple macOS Mojave versions prior to 10.14.4. The vulnerability can be exploited by ...

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...

May 2, 2019—KB4502112 (OS Build 15063.1785)

None None...

(Windows Insider Program) Compatibility update for upgrading to Windows 10, Version 1903: May 1, 2019

None None...

Buffer Overflow Vulnerability in Multiple Tenda Products (CNVD-2019-13772)

The Tenda AC7, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the web server httpd in the Tenda AC7 using firmware V15.03.06.44CN AC7 and earlier, the AC9 using firmware V15.03.05.196318CN AC9 and earlier, and the AC10 using firmware...

Cybozu Garoon Access Control Error Vulnerability (CNVD-2019-12695)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An access control error vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1. The vulnerability...

Compatibility update for upgrading to Windows 10, version 1703: April 25, 2019

None None...

April 25, 2019—KB4493473 (OS Build 14393.2941)

None None...

Update for Windows 10, version 1607 and Windows Server 2016: April 25, 2019

None None...

April 25, 2019—KB4493440 (OS Build 16299.1127)

None None...

April 25, 2019—KB4493437 (OS Build 17134.753)

None None...

April 25, 2019—KB4493436 (OS Build 15063.1784)

None None...

PT-2019-12314

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the notes parameter in the "notes.php" endpoint. Recommendations For I, Librarian versio...

GitLab Input Validation Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...

PT-2019-12307

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the export files parameter in the "export.php" API endpoint. Recommendations For I,...

CVE-2019-11375

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...

HPE Integrated Lights-Out 5 Cross-Site Scripting Vulnerability

HPE Integrated Lights-Out 5 iLO 5 is a remote control solution. The solution enables remote monitoring and operation and maintenance of IT assets such as servers. A cross-site scripting vulnerability exists in HPE Integrated iLO 5 for Gen10 ProLiant servers, which stems from the lack of proper...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-17527)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 10 and 11. A remote attacker could exploit this...

CVE-2019-0040

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...