Dovecot < 2.3.9.2 DoS Vulnerability

Dovecot is prone to a denial of service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

PT-2019-13483 · Unknown · En100 Ethernet Module Iec 61850 Variant +4

Name of the Vulnerable Software and Affected Versions: EN100 Ethernet module DNP3 variant All versions EN100 Ethernet module IEC 61850 variant All versions V4.37 EN100 Ethernet module IEC104 variant All versions EN100 Ethernet module Modbus TCP variant All versions EN100 Ethernet module PROFINET ...

KLA11623 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Unspecified vulnerability in libexpat can ...

forma.lms <= 2.2.1 Multiple SQL Injection Vulnerabilities

Forma Learning Management System is prone to multiple SQL injection vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

PT-2019-18460 · Synology · Music Station

Name of the Vulnerable Software and Affected Versions: Music Station versions prior to the latest version Description: This issue allows remote attackers to inject and execute scripts on the administrator’s management console through a cross-site scripting XSS vulnerability in Music Station...

Eclipse Jetty XSS Vulnerability (CVE-2019-17632) - Linux

Eclipse Jetty is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

PT-2019-4261 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: Intel Graphics Drivers versions prior to 10.18.14.5074 aka 15.36.x.5074 Description: The issue is related to pointer corruption in the Unified Shader Compiler and a null pointer dereference in the Kernel Mode Driver component of the Intel...

PT-2019-4047 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 25.20.100.6618 DCH or 21.20.x.5077 aka 15.45.5077 Description: The issue is related to a buffer overflow in the Kernel Mode module of the Intel Graphics Driver, which may allow a privileged user to enab...

Lenovo Energy Management Driver for Windows 10 Vulnerability - US

Lenovo Security Advisory: LEN-27682 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6183 Summary Description: A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to...

Mozilla Firefox ESR Security Advisories (MFSA2019-33, MFSA2019-34) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

KLA11609 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Bluetooth component can be exploited remotely via specially designed webpage to execut...

PT-2019-5982 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 13.1 and earlier Description: The issue is related to an out-of-bounds read in the memory buffer. Successful exploitation could lead to information disclosure. This is a result of a vulnerability in the...

PT-2019-5959 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 13.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the application for processing media data. Exploitation of this issue could allow a remote attacker to disclose protecte...

libpcap < 1.9.1 Buffer Overflow Vulnerability

libpcap is prone to a buffer overflow vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

WordPress <= 5.2.3 - Multiple security issues (XSS, SSRF, Cache Poisoning)

Multiple security issues XSS, SSRF, Cache Poisoning found by Evan Ricafort, J.D. Grimes, Weston Ruter, David Newman, Eugene Kolodenker, Ben Bidner and WordPress security team in WordPress versions = 5.2.3. Solution Update the WordPress to the latest available version at least 5.2.4...

NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Vulnerability (NS-SA-2019-0193)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has curl packages installed that are affected by a vulnerability: - Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the toolmsgs.c:voutf function that may result in information exposure an...

PT-2019-15207

Name of the Vulnerable Software and Affected Versions Popup Maker plugin versions prior to 1.8.13 Description An issue allows an unauthenticated attacker to partially control the arguments of the do action function, invoking certain popmake or pum methods. This can be used to control content and...

PT-2019-15171 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor versions prior to 8.0.330.0 Description: The issue allows for NTLM SSO hash theft using crafted FDF or XFDF files. This can occur when a link to a file, such as '192.168.0.2C$file.pdf', is accessed without user interaction,...

PT-2019-17107 · Ibm · Ibm Jazz Reporting Service

Name of the Vulnerable Software and Affected Versions: IBM Jazz Reporting Service JRS versions 6.0 through 6.0.6.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

Adobe ColdFusion Multiple Vulnerabilities (APSB19-47)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion"; if...