PT-2019-2465 · Ite Tech · Ite Tech Consumer Infrared Driver

Name of the Vulnerable Software and Affected Versions: ITE Tech Consumer Infrared Driver versions prior to 5.4.3.0 Description: The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. This...

PT-2019-12246 · Tzumi Electronics · Klic Lock +1

Name of the Vulnerable Software and Affected Versions: Tzumi Electronics Klic Lock application version 1.0.9 Tzumi Electronics Klic Smart Padlock Model 5686 Firmware 6.2 Description: The issue allows attackers to bypass authentication in website post requests, enabling them to access resources th...

WordPress User Submitted Posts plugin <= 20190426 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability found by NinTechNet in WordPress User Submitted Posts plugin versions = 20190426. Apache + PHP FastCGI required for exploitation of this vulnerability. Solution Update the WordPress User Submitted Posts plugin to the latest available version at least 20190501...

PT-2019-18694 · Prima Systems · Flexair

Name of the Vulnerable Software and Affected Versions: Prima Systems FlexAir versions 2.3.38 and prior Description: The issue arises from parameters sent to scripts not being properly sanitized before being returned to the user. This may allow an attacker to execute arbitrary code in a user’s...

Open-Xchange (OX) App Suite < 7.8.3-rev13 Multiple Vulnerabilities

Open-Xchange OX App Suite is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

Cybozu Garoon 4.x.x <= 4.10.1 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

Cybozu Garoon >= 4.2.4, <= 4.10.1 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

Cybozu Garoon 4.6.x <= 4.6.3 XSS Vulnerability

Cybozu Garron is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00213)

Multiple potential security vulnerabilities in Intel Active Management Technology AMT may allow escalation of privilege, information disclosure, and/or denial of service DoS. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PT-2019-16856 · Ibm · Ibm Websphere Mq

Name of the Vulnerable Software and Affected Versions: IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 IBM WebSphere MQ versions 9.0.0.0 through 9.1.1 Description: The issue allows a local attacker to cause a denial of service within the error log reporting system. Recommendations: For IBM...

Mozilla Firefox ESR Security Advisories (MFSA2019-09, MFSA2019-14) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2019-2417 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.4.182 Linux kernel versions prior to 4.9.182 Linux kernel versions prior to 4.14.127 Linux kernel versions prior to 4.19.52 Linux kernel versions prior to 5.1.11 Description: The issue is related to the TCP...

PT-2019-6872 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.8.0.3 Description: The issue is caused by multiple buffer overflows in certain procedures, including char-ready, tcp-accept-ready, and file-select. This allows attackers to cause a denial of service by opening a fi...

PT-2019-6430 · Ncurses +3 · Ncurses +3

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the postprocess terminfo function in tinfo/parse entry.c. This vulnerability allows remote attackers to cause a denial of service via crafted commands...

XClarity Administrator (LXCA) Service Data May Include Proxy Credentials - US

Lenovo Security Advisory: LEN-26141 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6158 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered HTTP proxy credentials being written ...

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Multiple security flaws were found in the graphite2 font library shipped with Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute...

Dovecot < 2.3.5.2 Denial of Service Vulnerability

Dovecot is prone to a Denial of Service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

PT-2019-12362 · Pulse · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions 9.0RX before 9.0R3.4 Pulse Connect Secure versions 8.3RX before 8.3R7.1 Pulse Connect Secure versions 8.2RX before 8.2R12.1 Pulse Connect Secure versions 8.1RX before 8.1R15.1 Description: An NFS problem could...

Gitea < 1.7.6 or < 1.8.0-rc3 Multiple Vulnerabilities

Gitea is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitea:gitea"; if description...

PT-2019-18311 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.779 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. T...