DEBIAN-CVE-2013-1816

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service application crash by sending a specially crafted request...

Centreon SQL Injection Vulnerability (CNVD-2019-42245)

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web versions prior to 2.8.28. The vulnerability ste...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-42380)

Centreon Merethis Centreon is an open source IT monitoring software package from Centreon France that needs to be used with Nagios. The software enables the management of Nagios via the Web, as well as the monitoring of networks, operating systems and applications via third-party components. A...

ClamAV Memory Corruption Vulnerability

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A memory corruption vulnerability exists in ClamAV versions prior to 0.97.7, which can be exploited by an attacker to execu...

slpjs input validation error vulnerability

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. An input validation error vulnerability exists in versions of slpjs prior to 0.21.4, which can be exploited by attackers to create specially crafted bitcoin scripts...

PuTTY injection vulnerability

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. An injection vulnerability exists in versions of PuTTY prior to 0.73. The vulnerability stems from a lack of proper...

Unspecified Vulnerability in PuTTY

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions prior to 0.73. An attacker can exploit this vulnerability to obtain...

Design/Logic Flaw

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

Intel Active Management Technology Elevation of Privilege Vulnerability (CNVD-2019-42601)

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A security vulnerability exists in the subsystem in Intel AMT versions prior to 12.0.45 that stems from inadequate input validation. An attacker could exploit...

NiceHash Miner Input Validation Error Vulnerability

NiceHash Miner is a mining software for Bitcoin. An input validation error vulnerability exists in NiceHash Miner versions prior to 2.0.3.0. The vulnerability stems from a network system or product that does not properly validate incoming data. No details of the vulnerability are provided at this...

TYPO3 Information Disclosure Vulnerability (CNVD-2019-41228)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.5.4. An attacker can exploit the vulnerability to disclose information...

Cryptocat Information Disclosure Vulnerability

Cryptocat is an open source online cryptographic chat application. An information disclosure vulnerability exists in versions of Cryptocat prior to 2.0.22. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the...

GitLab Information Disclosure Vulnerability (CNVD-2019-42894)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

Cryptocat has an unspecified vulnerability

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in Cryptocat versions prior to 2.0.22. An attacker can exploit the vulnerability to spoof arbitrary users and send malicious and misleading messages as other users...

Google Chrome audio component resource management error vulnerability

Google Chrome is a web browser from Google, Inc. audio is an audio component of Google Chrome. A resource management error vulnerability exists in audio in versions of Google Chrome prior to 78.0.3904.87, which can be exploited by an attacker to execute code on a system with the help of a special...

Unspecified vulnerability in JetBrains Vim plugin

JetBrains Vim plugin is a Vim simulation plugin for IDE Integrated Development Environment from the Czech company JetBrains. A security vulnerability exists in JetBrains Vim plugin versions prior to 0.52. An attacker can exploit the vulnerability to obtain sensitive information...

SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...

Symantec SONAR Tamper Protection Bypass Vulnerability

Symantec SONAR is the United States Symantec Symantec company's set of computer real-time protection against malicious programs. A tamper protection bypass vulnerability exists in versions of Symantec SONAR prior to 12.0.2, which can be exploited by an attacker to bypass existing tamper protectio...

Google Chrome Resource Management Error Vulnerability (CNVD-2019-38239)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in versions of Google Chrome prior to 78.0.3904.70. An attacker can exploit this vulnerability to cause the browser to crash with the help of a specially crafted web page...

Craft CMS Authorization Issues Vulnerability

Craft CMS is a content management system CMS. An authorization issue vulnerability exists in Craft CMS 3.1.7 and earlier versions, which can be exploited by attackers to conduct brute force attacks...