CVE-2019-19230

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...

CVE-2019-19230

CVE-2019-19230 affects CA Release Automation (Nolio) 6.6 – DataManagement component . It is an insecure/deserialization vulnerability that allows a remote attacker to execute arbitrary code. The issue is documented with a CRITICAL (CVSS v3.1 9.8) impact and a high-severity network-exposed vector....

Cross-site Scripting (XSS)

serialize-to-js is vulnerable to cross-site scripting XSS. The vulnerability exists as the regular expressions, performed on source, were insufficient to deny unsafe characters when the object is used in an environment that is not runned from Node.js...

Arbitrary Code Execution

odata-client-proxy is vulnerable to arbitrary code execution. The vulnerability exists as the classes that were deserialized were not checked in AbstractService, allowing unsafe deserialization that can lead to arbitrary code execution...

GHSA-QHRX-HCM6-PMRW Unsafe deserialization in SmtpTransport in CakePHP

An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction...

Symfony Unsafe Cache Serialization Could Enable RCE

An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. Serializing certain cache adapter interfaces could result in remote code injection. This is related to symfony/cache...

Cross-site Scripting (XSS)

Overview devalue is a JSON.stringify, but handles cyclical references, repeated references, undefined, regular expressions, dates, Map and Set. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regul...

Linux kernel buffer overflow vulnerability (CNVD-2019-46998)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product performing operations in memory without properl...

Red Hat FreeIPA Buffer Overflow Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The product mainly for Linux and Unix computer networks to provide identity management, policy management and audit management IPA and other functions. A buffer overflow vulnerability exists in Red Hat...

STAMP Workbench Installer Code Issue Vulnerability

STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...

jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the commons-dbcp gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or...

jackson-databind: Serialization gadgets in classes of the ehcache package

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLA...

FreeRadius 3.0.19 Logrotate Privilege Escalation Vulnerability

Privilege Escalation via Logrotate in FreeRadius Overview Identifier: AIT-SA-20191112-01 Target: FreeRadius Vendor: FreeRadius Version: all versions including 3.0.19 Fixed in Version: 12.2.3, 12.1.8 and 12.0.8 CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-10143 Author: Wolfgang Hotwagner AIT...

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)

A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes...

MGASA-2019-0322 Updated python-numpy packages fix security vulnerability

Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call CVE-2019-6446...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-16070)

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. A buffer overflow vulnerability exists in QTEE in multiple Qualcomm products. The vulnerability originates when a networked system or product performs an operation in memory without properly...

Microsoft Windows UAC Unsafe Interaction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to access an interactive desktop as a low-privileged user on the target system in order to exploit this vulnerability. The specific flaw exist...

ansible: unsafe template evaluation of returned module data can lead to information disclosure

A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed...

dankelley GRI has an unspecified vulnerability

dankelley GRI is a language for scientific graphics programming. A security vulnerability exists in dankelley GRI versions prior to 2.12.18, which stems from the program failing to use a safe method for creating temporary files. No details of the vulnerability are provided at this time...

PT-2019-4524 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.3 Description: The issue is related to errors in handling HTTP requests in the ajaxArchiveFiles.php component of the rConfig utility for managing network device configurations. Exploitation of this issue may allow a remote...