PHP 'FFI::cast()' Heap Based Memory Corruption Vulnerability

Description PHP is prone to a heap-based memory-corruption vulnerability. Successful exploits may allow the attacker to crash the affected application resulting in denial-of-service condition. Versions prior to PHP 7.4.0 are vulnerable. Technologies Affected PHP PHP 7.3.0 PHP PHP 7.3.1 PHP PHP...

CVE-2019-7618

A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user...

PHP 7.3.x < 7.3.6 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.30, 7.2.x prior to 7.2.19 or 7.3.x prior to 7.3.6. It is, therefore, affected by the following vulnerabilities: - An uninitialized read vulnerability exists in gdImageCreateFromXbm due to sscanf...

HPE Intelligent Management Center (IMC) guiDataDetail Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A guiDataDetail expression language injection remote code execution vulnerability exists in HPE Intelligen...

HPE Intelligent Management Center (IMC) compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A compareFilesResult expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23771)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An SSHParameterResource remote code execution vulnerability exists in HPE Intelligent Management Center IM...

HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability (CNVD-2019-24550)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A readListBySql SQL injection code execution vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center (IMC) TopoMsgServlet Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A TopoMsgServlet expression language injection remote code execution vulnerability exists in HPE Intellige...

HPE Intelligent Management Center (IMC) selectUserGroup Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A selectUserGroup expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An iccSelectDymicParam expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) faultParasSet Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A faultParasSet expression language injection remote code execution vulnerability exists in HPE Intelligen...

HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability (CNVD-2019-24555)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An OperatorMgrImpl SQL injection code execution vulnerability exists in HPE Intelligent Management Center...

HPE Intelligent Management Center (IMC) actionSelectContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An actionSelectContent expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) untrustworthy data deserialization vulnerability (CNVD-2019-23766)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. A TopoDebugServlet untrusted data deserialization vulnerability exists in HPE Intelligent Management Center...

HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability (CNVD-2019-24557)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A queryDataBySQL SQL injection code execution vulnerability exists in HPE Intelligent Management Center IM...

HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An updateEmailSuffix SQL injection code execution vulnerability exists in HPE Intelligent Management Cente...

CVE-2019-11980

A remote code exection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11973

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11970

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11976

A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...