PT-2019-18311 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.779 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. T...

WordPress Slideshow Gallery Plugin < 1.6.9 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

KLA11470 Multiple vulnerabilities in Oracle Java SE

Multiple vulnerabilities were found in Oracle Java SE. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Vulnerability in Windows DLL component of Java SE can be exploited remotely to bypass security restrictions; 2...

PT-2019-1950 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2023-11389 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 2019.010.20098 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...

KLA11463 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Infinite loop vulnerability in GSUP dissector can be exploited remotely via specially designed packet to cause denial of...

PT-2019-10840 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.6 Description: Multiple memory corruption issues were addressed with improved memory handling. Recommendations: For versions prior to 10.13.6, update to macOS High Sierra 10.13.6 or later to resolve the issue...

PT-2019-10828 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.6 Description: The issue is related to multiple memory corruption problems that have been addressed through improved memory handling. Recommendations: For versions prior to 10.13.6, update to macOS High Sierra...

PT-2019-11336 · Jenkins · Jenkins Fortify On Demand Uploader Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Fortify on Demand Uploader Plugin versions 3.0.10 and earlier Description: A cross-site request forgery issue allows attackers to initiate a connection to an attacker-specified server. Recommendations: For Jenkins Fortify on Demand...

PT-2019-2578 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.55 and earlier Description: The issue is related to a sandbox bypass vulnerability in the Jenkins Script Security Plugin, which is caused by incorrect type conversion. This allows a remote attacker to...

KLA11450 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability in IonMonkey JIT compiler can be exploited remotely t...

PT-2019-1903 · Apache +3 · Mod Auth Mellon +3

Name of the Vulnerable Software and Affected Versions: mod auth mellon versions prior to 0.14.2 Description: A vulnerability in mod auth mellon allows an open redirect in the logout URL, where requests with backslashes are treated as relative URLs, while browsers convert them to forward slashes,...

KLA11437 Multiple vulnerabilities in VMware products

Multiple vulnerabilities were found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. Vulnerability related to VMX process can be exploited remotely to gain privileges; 2. Vulnerability related to COM classes...

Embedded 7z vulnerable with a cvs score of 10

The embedded 7zip version is vulnerable. Please update...

PT-2019-16843 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root...

WinRAR <= 5.60 Out-of-Bounds Write Vulnerability

WinRAR is prone to an Out-of-Bounds Write vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

azure-umqtt-c vulnerable to denial-of-service (DoS)

Overview azure-umqtt-c contains a denial-of-service DoS vulnerability CWE-400. Masataka Sakaguchi, Bintatsu Noda and Hisashi Kojima of FUJITSU LABORATORIES LTD. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impac...

GHSA-856X-CP3Q-47VG Insecure Default Configuration in airbrake

Affected versions of airbrake default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive information...

@descartes/d-editmap (=6.0.0), @descartes/d-geoplateforme (=6.0.0-RC2) +87 more potentially affected by CVE-2016-10583 via closure-util (>=1.15.1 <=1.26.0)

closure-util NPM version =1.15.1, =1.36.0, =0.0.1, =3.6.0, =1.0.0, =0.1.0, =0.3.0, =0.9.0, =0.1.0, =9.0.0, =1.20.2, =2.1.0 and more Source cves: CVE-2016-10583 Source advisory: OSV:GHSA-2HPJ-G53M-9GJ6...

Apache Traffic Server (ATS) sslheader Plugin Vulnerability

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...