Compatibility update for upgrading to Windows 10, version 1809: April 2, 2019

None None...

Dell Networking OS10 Key Management Error Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell. A security vulnerability exists in Dell Networking OS10 that stems from the program failing to properly manage keys. An attacker could exploit the vulnerability to bypass authentication and encryption and execute...

PT-2019-11967 · None +1 · Lzo +2

Name of the Vulnerable Software and Affected Versions: LZO version 2.10 Long Range Zip lrzip version 0.631 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and application crash, via a crafted archive. Recommendations: For LZO versio...

UBUNTU-CVE-2019-5737

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated...

Apple macOS Mojave Security Out-of-Bounds Read Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. An out-of-bounds read vulnerability exists in the Security component of Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit th...

Apple iOS, tvOS and macOS Mojave Siri API Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple macOS Mojave is a specialized operating system developed for Mac computers.Siri is a voice control component of it. A security vulnerability exists in the processing of command requests f...

Apple iOS and Apple macOS Mojave Messages Information Disclosure Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS Mojave is a specialized operating system developed for Mac computers. messages is one of the application components used to send text. photos and videos,...

Apple macOS Mojave Time Machine has an unspecified vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Time Machine is one of the system, file backup components. An unspecified vulnerability exists in the Time Machine component of Apple macOS Mojave versions prior to 10.14.4. A local attacker can exploit this...

PT-2019-11415

Name of the Vulnerable Software and Affected Versions: Kentico Xperience versions 9.x and earlier Kentico Xperience versions 10.0.x through 10.0.51 Kentico Xperience versions 11.0.x through 11.0.47 Kentico Xperience versions 12.0.x through 12.0.14 Description: The issue is related to the...

SQL Injection Vulnerability in the Enterprise Website Building System of Beijing Ten Degrees Creative Technology Co.

Beijing Ten Degrees Creative Technology Co., Ltd. is a provider of Internet branding services for medium and high-end enterprises, specializing in Beijing website construction and Beijing website production. Beijing Ten Degrees Creative Thinking Technology Co., Ltd. corporate website building...

March 19, 2019—KB4489888 (OS Build 15063.1716)

None None...

March 19, 2019—KB4489890 (OS Build 16299.1059)

None None...

March 19, 2019—KB4489889 (OS Build 14393.2879)

None None...

CVE-2019-9829

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

Maccms Arbitrary PHP Code Execution Vulnerability

Maccms is a PHP-based content management system CMS for film and television. A code injection vulnerability exists in Maccms version 10. A remote attacker can exploit this vulnerability to inject and execute arbitrary PHP code...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2019-10617)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A memory corruption vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE 10 and 11. A remote attacker could exploit this...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2019-07239)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote memory corruption vulnerability exists in Microsoft IE 10 and 11 that originates when the program incorrectly handles objects in memory. A remote attacker cou...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2019-07242)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote memory corruption vulnerability exists in Microsoft Edge that originates when a program incorrectly accesses an object in memory. A remote attacker can exploit the vulnerability ...

CVE-2019-0269

SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0275

SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server J2EE-APPS, versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting XSS vulnerability...