CVE-2018-12299

Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names...

Aiwo Real Estate System v4.7 Information Disclosure Vulnerability

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. AiWo Real Estate System v4.7 has information leakage vulnerability, attackers can use the vulnerability to obtain database information...

Aiwo Real Estate System v4.7 has Arbitrary File Download Vulnerability

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Code execution vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to execute arbitrary code and obtain server information...

Directory Traversal Vulnerability in Aiwo Real Estate System v4.7

Intimate Cat imcat is an extremely light, minimalist general-purpose PHP website system. Directory traversal vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to obtain directory files and other information...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has a code execution vulnerability that can be exploited by attackers to execute arbitrary code and obtain server information...

File Upload Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. File upload vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to upload malicious code and gain server privileges...

CVE-2018-17169

An XML external entity XXE vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

PT-2019-12314

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the notes parameter in the "notes.php" endpoint. Recommendations For I, Librarian versio...

Linux Kernel Information Disclosure Vulnerability (CNVD-2019-13411)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in Linux kernel versions 4.20.5 and earlier, which arises from errors such as configuration during operation of a...

PT-2019-12307

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the export files parameter in the "export.php" API endpoint. Recommendations For I,...

Suricata Out-of-Bounds Read Vulnerability

Suricata is a high-performance network intrusion detection IDS, intrusion prevention IPS and network security monitoring multi-threaded engine. An out-of-bounds read vulnerability exists in Suricata 4.0.4. The vulnerability stems from an integer overflow in DecodeENIPPDU in app-layer-enip-commmon...

PT-2019-8748 · Open Information Security Foundation · Suricata

Name of the Vulnerable Software and Affected Versions: Suricata version 4.0.4 Description: The issue arises from incorrect handling of the SSH banner parsing in Suricata. A malformed SSH banner can cause the parsing code to read beyond the allocated data due to the lack of a length check in the...

DEBIAN-CVE-2019-5421

Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The Devise::Models::Lockable class, more specifically at the incrementfailedattempts method. File location: lib/devise/models/lockable.rb that can result in Multiple concurrent requests c...

Sitemagic CMS Cross-Site Scripting Vulnerability

Sitemagic CMS is a scalable content management system CMS. A cross-site scripting vulnerability exists in the SMFiles/FrmUpload.class.php file in Sitemagic CMS v4.4, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'filename' parameter...

CleanMyMac X Elevation of Privilege Vulnerability

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform from MacPaw USA. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in CleanMyMac X version 4.20, which stems from the program's inability to...

UBUNTU-CVE-2019-9878

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by for example sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation...

PrinterOn Enterprise Cross-Site Scripting Vulnerability

PrinterOn Enterprise is a secure cloud printing solution from PrinterOn Canada. The solution supports printing from laptops, desktops and mobile devices connected to printers. A cross-site scripting vulnerability exists in PrinterOn Enterprise version 4.1.4, which stems from a lack of proper...

CVE-2019-9622

eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file...

CVE-2019-9588

There is an Invalid memory access in gAtomicIncrement located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...