4742 matches found
cPanel Injection Vulnerability (CNVD-2019-36149)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in versions of cPanel prior to 70.0.23. An attacker can exploit this vulnerability to inject...
cPanel Information Disclosure Vulnerability (CNVD-2019-36150)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a configurati...
Google Chrome audio resource management error vulnerability
Google Chrome is a web browser from Google, Inc. audio is an audio component of Google Chrome. A resource management error vulnerability exists in audio in versions of Google Chrome prior to 77.0.3865.120. An attacker can exploit this vulnerability to execute arbitrary code on the system with the...
ImageMagick heap buffer overflow vulnerability (CNVD-2019-41020)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer overflow vulnerability exists in ReadPSInfo in coders/ps.c in versions of ImageMagick prior to 7.0.8-54. An attacker could exploit this vulnerability to...
ImageMagick memory misreference vulnerability (CNVD-2019-41003)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in DestroyStringInfo in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-55. The vulnerability stems from the...
CVE-2019-17497
Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...
WordPress kiwi-logo-carousel plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. kiwi-logo-carousel is a rotating effect plugin used in it. A cross-site request forgery vulnerability exists in WordPress kiwi-logo-carousel plugin...
Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2019-34739)
Cisco Prime Infrastructure is a network management tool that supports full lifecycle management of the entire network infrastructure from a single graphical interface. A cross-site scripting vulnerability exists in the web-based management interface in Cisco Prime Infrastructure versions prior to...
SAP BusinessObjects Business Intelligence Stored Cross-Site Scripting Vulnerability (CNVD-2019-34406)
SAP BusinessObjects Business Intelligence is a reporting and analytics business intelligence BI platform for enterprise users. A stored cross-site scripting vulnerability exists in SAP BusinessObjects Business Intelligence versions prior to 4.2. The vulnerability stems from the product's inabilit...
NVIDIA Shield TV Experience Buffer Overflow Vulnerability
The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A buffer overflow vulnerability exists in the NVIDIA Tegra bootloader in NVIDIA Shield TV Experience versions prior to 8.0.1, which originates from an incorrect boundary check performed by the...
WordPress unite-gallery-lite plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. unite-gallery-lite is an image and video gallery plugin used in it. A cross-site request forgery vulnerability exists in WordPress...
NetApp OnCommand Workflow Automation Information Disclosure Vulnerability
NetApp OnCommand Workflow Automation is a suite of storage process management software from American NetApp. The software provides storage configuration, storage cloning and other functions for the database or file system. An information disclosure vulnerability exists in NetApp OnCommand Workflo...
Apple Xcode ld64 Component Arbitrary Code Execution Vulnerability
Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...
WordPress bj-lazy-load plugin remote file inclusion vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bj-lazy-load is a page content delayed loading plugin used in it. A remote file inclusion vulnerability exists in versions of the...
avada theme for WordPress cross-site scripting vulnerability
avada theme for WordPress is a responsive multipurpose theme plugin for use in WordPress. A cross-site scripting vulnerability exists in avada theme for WordPress versions prior to 5.1.5. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...
PT-2019-14678 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.3.4 Description: The issue is related to a use-after-free in the MmsServer waitReady function located in the mms/iso mms/server/mms server.c file. This can be demonstrated using the server example goose...
Mozilla Firefox Security Advisories (MFSA2019-31, MFSA2019-31) - Windows
Mozilla Firefox is prone to a hijacking vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
ALPINE-CVE-2019-16403
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...
CVE-2019-12755
Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information...