CVE-2019-3629 Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

Application protection bypass vulnerability in McAfee Enterprise Security Manager ESM prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters...

CVE-2019-3629

McAfee Enterprise Security Manager (ESM) has an authorization issue that allows an unauthenticated user to impersonate system users via specially crafted parameters. Affected versions are ESM prior to 11.2.0 and prior to 10.4.0. This is a protection bypass vulnerability in the application itself....

AROX School-ERP Pro - Unauthenticated Remote Command Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "AROX School-ERP Pro Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a command execution vulnerability in AROX...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

Improper access control

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise Advisory

Summary: Potential security vulnerabilities in Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise RSTe may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEI...

ConvertPlus <= 3.4.2 - Unauthenticated Arbitrary User Role Creation

The convertplug WordPress plugin was affected by an Unauthenticated Arbitrary User Role Creation security vulnerability...

CVE-2019-0098

Logic bug vulnerability in subsystem for IntelR CSME before version 12.0.35, IntelR TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0092

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0132

Data Corruption in Intel UniteR Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access...

Design/Logic Flaw

Data Corruption in Intel UniteR Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access...

Information Disclosure

Firefox ESR and Firefox are vulnerable to information disclosure. A remote unauthenticated user can send a specially crafted request to view potentially sensitive information on the target system. The Fetch API component is affected...

Sandbox Restrictions Bypass

Thunderbird, Firefox ESR and Firefox are vulnerable to sandbox restrictions bypass. A remote unauthenticated user could cause memory corruption in the parent process due to the lack of parameter validation on IPC messages resulting in a system hang...

Denial Of Service (DoS)

Thunderbird, Firefox ESR and Firefox are vulnerable to denial of service attacks. A remote unauthenticated user could crash the application by manipulating the SVG "animatedPathSegList" through script...

CVE-2019-3725 Command Injection vulnerability

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrar...

CVE-2019-7404

An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var/gapm7100$today'sdate.log for reading a filename such as gapm7100190101.log...

Design/Logic Flaw

An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var/gapm7100$today'sdate.log for reading a filename such as gapm7100190101.log...

CVE-2018-7084

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete...

CVE-2018-7084

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete...

OPENSUSE-SU-2019:1352-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issue fixed: - CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and UsbBusPei, which could potentially be triggered by a local unauthenticated user bsc1131361. This update was imported from the SUSE:SLE-15:Update update project...