CVE-2019-18361

JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution...

Google Chrome Permission License and Access Control Issues Vulnerability (CNVD-2019-38251)

Google Chrome is a web browser from Google, an American company. A vulnerability exists in Installer in versions prior to Google Chrome 78.0.3904.70 with privilege permission and access control issues. A remote attacker can exploit the vulnerability to elevate privileges...

Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-38247)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A buffer overflow vulnerability exists in the Blink component of Google Chrome versions prior to 78.0.3904.70. A remote attacker...

Micro Focus Self Service Password Reset Trust Management Issue Vulnerability

Micro Focus Self Service Password Reset is a web-based password management solution from Micro Focus UK. The product allows users to change their passwords using self-service. A trust management issue vulnerability exists in versions prior to Micro Focus Self Service Password Reset 4.4.0.4, which...

GNU libidn2 Buffer Error Vulnerability

GNU libidn2 is a library that supports encoding and decoding of internationalized domain names. A buffer error vulnerability exists in the 'idn2toascii4i' function of the lib/lookup.c file in GNU libidn2 versions prior to 2.1.1, which can be exploited by attackers to cause, among other things, a...

DEBIAN-CVE-2019-17400

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion...

PT-2019-14905 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.8 Description: The issue concerns an unsanitized filename variable in the recording play.php file, which is base64 decoded and reflected in HTML. This leads to a potential XSS issue. Recommendations: For...

cPanel Injection Vulnerability (CNVD-2019-36149)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in versions of cPanel prior to 70.0.23. An attacker can exploit this vulnerability to inject...

cPanel Security Feature Issue Vulnerability (CNVD-2019-36154)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security signature issue vulnerability exists in versions prior to cPanel 71.9980.37. An attacker can exploit the vulnerability...

cPanel Information Disclosure Vulnerability (CNVD-2019-36150)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a configurati...

Google Chrome audio resource management error vulnerability

Google Chrome is a web browser from Google, Inc. audio is an audio component of Google Chrome. A resource management error vulnerability exists in audio in versions of Google Chrome prior to 77.0.3865.120. An attacker can exploit this vulnerability to execute arbitrary code on the system with the...

ImageMagick heap buffer overflow vulnerability (CNVD-2019-41020)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer overflow vulnerability exists in ReadPSInfo in coders/ps.c in versions of ImageMagick prior to 7.0.8-54. An attacker could exploit this vulnerability to...

ImageMagick memory misreference vulnerability (CNVD-2019-41003)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in DestroyStringInfo in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-55. The vulnerability stems from the...

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

WordPress kiwi-logo-carousel plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. kiwi-logo-carousel is a rotating effect plugin used in it. A cross-site request forgery vulnerability exists in WordPress kiwi-logo-carousel plugin...

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2019-34739)

Cisco Prime Infrastructure is a network management tool that supports full lifecycle management of the entire network infrastructure from a single graphical interface. A cross-site scripting vulnerability exists in the web-based management interface in Cisco Prime Infrastructure versions prior to...

SAP BusinessObjects Business Intelligence Stored Cross-Site Scripting Vulnerability (CNVD-2019-34406)

SAP BusinessObjects Business Intelligence is a reporting and analytics business intelligence BI platform for enterprise users. A stored cross-site scripting vulnerability exists in SAP BusinessObjects Business Intelligence versions prior to 4.2. The vulnerability stems from the product's inabilit...

NVIDIA Shield TV Experience Buffer Overflow Vulnerability

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A buffer overflow vulnerability exists in the NVIDIA Tegra bootloader in NVIDIA Shield TV Experience versions prior to 8.0.1, which originates from an incorrect boundary check performed by the...

WordPress unite-gallery-lite plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. unite-gallery-lite is an image and video gallery plugin used in it. A cross-site request forgery vulnerability exists in WordPress...

Apple Xcode ld64 Component Arbitrary Code Execution Vulnerability

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...