jackson-mapper-asl: XML external entity similar to CVE-2016-3720

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries such that an XML external entity XXE vulnerability affects codehaus's jackson-mapper-asl libraries. This vulnerability is similar to CVE-2016-3720. The primary threat from this flaw is data integrity...

VMware Harbor Container Registry for Pivotal Platform SQL Injection Vulnerability

VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A SQL injection vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a database-based application that lacks...

PT-2019-7492 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

SQL Injection Vulnerability in xycms Logistics and Transportation System v1.9

Jiangsu Xinyue Technology hereinafter referred to as "Xinyue Technology", a pioneer in the domestic website building industry, is a technology enterprise with independent intellectual property rights. xycms logistics and transportation company website building system v1.9 SQL injection...

RISE Ultimate Project Manager SQL Injection Vulnerability

Rise Ultimate Project Manager is a web-based project management system. A SQL injection vulnerability exists in RISE Ultimate Project Manager version 1.9. A remote attacker can exploit this vulnerability by sending the 'search' parameter to the index.php/knowledgebase/getarticlesuggestion/ file t...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the krb5-debuginfo-1.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)

The krb5ldaplockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors, related to the...

PT-2005-4445 · Xmb · Xmb

Name of the Vulnerable Software and Affected Versions: XMB version 1.9.2 Description: The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file. Recommendations: For XMB version 1.9.2,...

2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 for ARM64 (KB4562900)

2020-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 for ARM64 KB4562900...