CVE-2019-6139

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

CVE-2019-6139

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

Design/Logic Flaw

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

CVE-2019-6139

Forcepoint User ID (FUID) server up to version 1.2 has a remote arbitrary file upload vulnerability on TCP port 5001 that can lead to remote code execution. Upgrade to FUID 1.3+ to fix. If on 1.2 or earlier, restrict external access to port 5001 with firewall rules since the service is intended f...

CVE-2019-6139

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

PT-2019-17975

Name of the Vulnerable Software and Affected Versions Forcepoint User ID FUID versions up to 1.2 Description The issue allows for remote arbitrary file upload on TCP port 5001, which may lead to remote code execution. Recommendations For FUID versions up to 1.2, upgrade to FUID version 1.3 or...

CVE-2019-6139: Unrestricted Upload of File with Dangerous Type

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

CVE-2019-7316

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability...

PT-2019-2306

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to modify a user's portfolio by altering the user id value in an HT...

PT-2019-2307

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to exploit the weakness. By manipulating the user id parameter in a...

ALPINE-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

UBUNTU-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

CVE-2018-20590

Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...

PT-2018-15454

Name of the Vulnerable Software and Affected Versions Ivan Cordoba Generic Content Management System CMS through 2018-04-28 Description The issue allows for XSS via the Administrator/users.php user ID. Recommendations For Ivan Cordoba Generic Content Management System CMS through 2018-04-28, avoi...

CVE-2018-20590: Improper Neutralization of Input During Web Page Generation

Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...

IBM API Connect Authentication Bypass Vulnerability

IBM API Connect aka APIConnect is an integrated solution for managing the API lifecycle from IBM USA. The solution supports creating, running, managing, and securing APIs, microservices, and more. An authentication bypass vulnerability exists in LoopBack in IBM API Connect versions 2018.1 through...

CVE-2018-19829

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

UBUNTU-CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

PT-2018-2514

Name of the Vulnerable Software and Affected Versions PolicyKit versions 0.115 Description The issue is related to errors in handling large user ID values exceeding INT MAX in the PolicyKit platform, which can lead to the execution of any systemctl command. This can allow an attacker to bypass...

kernel: Integer overflow in Linux's create_elf_tables function

An integer overflow flaw was found in the Linux kernel's createelftables function. An unprivileged local user with access to SUID or otherwise privileged binary could use this flaw to escalate their privileges on the system...