Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability (CNVD-2019-37414)

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in Cisco TelePresence Collaboration Endpoint CE versions prior to 9.8.1 due to an improperly implemented privilege. An attacker can exploit the vulnerability to overwrite arbitrary files by logging in and...

Mozilla Firefox and Mozilla Firefox ESR Resource Management Error Vulnerability (CNVD-2019-38481)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 70 and...

Unspecified Vulnerability in Mozilla Firefox and Mozilla Firefox ESR

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Firefox versions prior to Firefox 70 and...

Rocket.Chat Cross-Site Scripting Vulnerability (CNVD-2019-36863)

Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions of Rocket.Chat prior to 2.1.0, which stems from a lack of proper validation of client-side data by the web application and can be exploited by an attacker to execute client-side code...

Apple macOS Catalina Intel Graphics Driver Component Memory Corruption Vulnerability

Apple macOS Catalina is an Apple operating system developed specifically for Mac computers.The Intel Graphics Driver is one of the integrated graphics drivers. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS Catalina versions prior to 10.15. The vulnerability...

UBUNTU-CVE-2019-3028

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

UBUNTU-CVE-2019-2944

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Unspecified vulnerability in cPanel (CNVD-2019-36146)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability to execute...

cPanel Competitive Conditions Issue Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A Competing Conditions Issue vulnerability exists in versions of cPanel prior to 58.0.4. The vulnerability stems from improper...

cPanel Code Problem Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code issue vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit this vulnerability to execute...

Swagger UI Injection Vulnerability

Swagger UI is an open source tool that supports visualizing API resources and being able to interact with them. An injection vulnerability exists in Swagger UI versions prior to 3.23.11, which can be exploited by an attacker to disclose information e.g., cross-site requests to forge token values...

Redmine Cross-Site Scripting Vulnerability (CNVD-2020-13535)

Redmine is an open source, web-based project management and defect tracking tool. A cross-site scripting vulnerability exists in Redmine versions prior to 3.4.11 and 4.0.x prior to 4.0.4. The vulnerability stems from a lack of proper validation of client-side data in the WEB application and can b...

CVE-2019-15020

A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection...

PT-2019-5860 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the WritePALMImage function in the /coders/palm.c component of the ImageMagick console graphic editor. It is associated with an integer overflow value. Exploitation of...

Apple iOS and tvOS Keyboards Component Information Disclosure Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs. An information disclosure vulnerability exists in the Keyboards component of Apple iOS before 13 and tvOS before 13, which can be exploited ...

UBUNTU-CVE-2019-11751

Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue...

Apple Xcode otool component arbitrary code execution vulnerability (CNVD-2019-37180)

Apple Xcode is a set of Apple Apple Inc. to provide developers with an integrated development environment, which is mainly used for the development of Mac OS X and iOS applications. otool is one of the Mac OS X applications used in the decompilation tool. An arbitrary code execution vulnerability...

GHSA-85CW-HJ65-QQV9 Polymorphic Typing issue in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10, 2.8.11.5, and 2.6.7.3. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540...

CVE-2019-11280

Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can ga...

Linux kernel denial of service vulnerability (CNVD-2019-32353)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.0.4, which stems from the failure of the 9p file system to properly protect isizewrite. An attacker...