UBUNTU-CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Kerberos. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos...

UBUNTU-CVE-2019-2920

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. Supported versions that are affected are 5.3.13 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...

UBUNTU-CVE-2019-2894

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

Vulnerability in the Java SE product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

WordPress addthis plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. addthis is a social sharing button plugin used in it. A cross-site scripting vulnerability exists in WordPress addthis plugin versions...

PT-2019-5146 · Xen · Xen

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.13 Description: An issue in Xen allows Arm domU attackers to cause a denial of service through an infinite loop involving a compare-and-exchange operation. This can be exploited to disrupt service. Recommendations: For...

Unspecified Vulnerability in Apple iOS CoreAudio Component

Apple iOS is an operating system for mobile devices developed by Apple, Inc. CoreAudio is one of the core audio components. A security vulnerability exists in the CoreAudio component in Apple iOS versions prior to 13, which can be exploited by an attacker to disclose process memory...

Apple iOS Bluetooth Component Logic Flaw Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of Apple iOS prior to version 13. An attacker can exploit this vulnerability to obtain sensitive information...

Apple iOS and tvOS Keyboards Component Information Disclosure Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs. An information disclosure vulnerability exists in the Keyboards component of Apple iOS before 13 and tvOS before 13, which can be exploited ...

Apple iOS Safari Component Address Bar Spoofing Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Safari is a component of the Safari browser. An address bar spoofing vulnerability exists in the Safari component in versions of Apple iOS prior to 13, which can be exploited by an attacker to spoof address bar content vi...

Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...

iOS 13 Bug Lets 3rd-Party Keyboards Gain 'Full Access' — Even When You Deny

Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting third-party keyboard apps. On iOS, third-party keyboard extensions can run entirely standalone without access to external services and...

CVE-2019-15301

A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...

CVE-2019-6003

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-7730 · Imapfilter +2 · Imapfilter +2

Name of the Vulnerable Software and Affected Versions: IMAPFilter versions prior to 2.6.13 Description: The issue is related to the failure of IMAPFilter to validate the hostname in an SSL certificate. This could potentially lead to security issues, but specific details about the estimated number...

Linux kernel memory leak vulnerability (CNVD-2019-32349)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the drivers/scsi/libsas/sasexpander.c file in Linux kernel versions prior to 5.1.13. An attacker could exploit this...

PT-2019-4911 · Apple +5 · Icloud +12

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.4 macOS Mojave versions prior to 10.14.6 tvOS versions prior to 12.4 watchOS versions prior to 5.3 Safari versions prior to 12.1.2 iTunes for Windows versions prior to 12.9.6 iCloud for Windows versions prior to 7.13...

Unspecified vulnerability in Linux kernel (CNVD-2019-38267)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/scsi/aacraid/commctrl.c file in versions of the Linux kernel prior to 4.13, which stems from aacgethbainfo not...

mysql: InnoDB unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...