uLaunchELF Buffer Overflow Vulnerability

uLaunchELF uLE is a file browser. A buffer overflow vulnerability exists in versions prior to uLaunchELF commit 170827a. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Quake3e Buffer Overflow Vulnerability

Quake3e is a Quake III Arena game engine. A buffer overflow vulnerability exists in versions prior to Quake3e 5ed740d. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

Snapview Mikogo Privilege Vulnerability

Snapview Mikogo is a suite of screen sharing and online meeting software. An elevation of privilege vulnerability exists in Snapview Mikogo versions prior to 5.10.2 Windows. A local attacker can exploit this vulnerability to elevate privileges...

PT-2019-11550

Name of the Vulnerable Software and Affected Versions: Linaro/OP-TEE versions prior to 3.4.0 Description: The issue is related to a buffer overflow in the optee os component, which can lead to code execution in the context of the TEE core kernel. Recommendations: For versions prior to 3.4.0, upda...

Cloud Foundry UAA Information Disclosure Vulnerability

Cloud Foundry UAA is an authentication and managed service endpoint for the CloudFoundry cloud platform from the Cloud Foundry Foundation in the United States. A security vulnerability exists in Cloud Foundry UAA versions prior to 73.3.0 that stems from the endpoint not being properly escaped. An...

aquaverde Aquarius CMS Access Control Error Vulnerability

aquaverde Aquarius CMS is a content management system CMS from aquaverde Switzerland. An access control error vulnerability exists in log files in versions of aquaverde Aquarius CMS prior to 4.1.1. The vulnerability arises from a network system or product that does not properly restrict access to...

ALPINE-CVE-2019-10192

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write ...

EdgeMAX EdgeSwitch Denial of Service Vulnerability

Ubiquiti Networks EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti Networks EdgeMAX EdgeSwitch versions prior to 1.8.2. The vulnerability can be exploited by an attacker with specially crafted commands to cause the SSH CLI...

Magento Input Validation Error Vulnerability (CNVD-2019-39390)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and version 2.3...

ImageMagick Resource Management Error Vulnerability (CNVD-2019-29430)

mageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software . A memory disclosure vulnerability exists in the 'ReadVIFFImage' function in the coders/viff.c file in ImageMagick Studio ImageMagick versions prior to 7.0.8-50. An attacker can exploit thi...

McAfee Enterprise Security Manager Path Traversal Vulnerability

McAfee Enterprise Security Manager ESM is a suite of security information and event management SIEM solutions from McAfee, USA. The solution supports viewing and analyzing threat intelligence as well as rapid threat prioritization and security response, and has a built-in embedded compliance...

glot-wwww Arbitrary Code Execution Vulnerability

glot-www is an open source pastebin with runnable snippets and an API. A security vulnerability exists in the default configuration in glot-www 2018-05-19 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary code...

Bobronix JEditor editor for Jira cross-site request forgery vulnerability

Bobronix JEditor editor for Jira is a rich text editor for Jira from Bobronix Cyprus. A cross-site request forgery vulnerability exists in Bobronix JEditor editor for Jira versions prior to 3.0.6. The vulnerability stems from a WEB application that does not adequately validate that a request is...

Mozilla Thunderbird icalparser.c File Heap Buffer Overflow Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A heap buffer overflow vulnerability exists in the icalparser.c file in Mozilla Thunderbi...

CVE-2018-10946

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI...

CVE-2019-5286

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007...

CVE-2017-14853

The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device...

Mozilla Firefox and Mozilla Firefox ESR Resource Management Error Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A resource management error vulnerability exists in Mozilla Firefox versions pri...

Intel Unite Client Input Validation Error Vulnerability

Intel UniteR Client is a conferencing client from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 3.3.176.13. An attacker could exploit this vulnerability to cause a denial of service data corruption...