Mozilla Thunderbird Denial of Service Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation of a set of independent from MozillaApplicationSuite e-mail client software. The software supports IMAP and POP mail protocols as well as HTML mail format. A security vulnerability exists in Mozilla Thunderbird versions prior to 60.5. An...

CVE-2018-4383

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4333

A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14...

CVE-2018-4274

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...

Grandstream GWN7000 Command Injection Vulnerability

The Grandstream GWN7000 is an enterprise-class VPN router from Grandstream. A security vulnerability exists in the Grandstream GWN7000 versions prior to 1.0.6.32. An attacker can exploit this vulnerability to execute illegal commands...

Grandstream GXV3611IR_HD Command Injection Vulnerability

The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit this vulnerability to execute illegal commands...

Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is...

Apple macOS Mojave Security Memory Misreference Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A memory misreference vulnerability exists in the Security component of Apple macOS Mojave versions prior to 10.14.4. An attacker could exploit...

Rukovoditel Project Management CRM Cross-Site Scripting Vulnerability

Rukovoditel Project Management CRM is a Web-based open source project management software. The software has project management , customer relationship management and other functions . A cross-site scripting vulnerability exists in Rukovoditel Project Management CRM versions prior to 2.4.1. The...

GNUBOARD5 Cross-Site Scripting Vulnerability

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in the pointlist.php file in GNUBOARD5 versions prior to 5.3.1.6. A remote attacker can exploit this vulnerability to execute arbitrary web script or HTML with the 'title' parameter...

Bash Input Validation Error Vulnerability

Bash is a shell command language interpreter written for the GNU Project and running on Unix-like operating systems by American software developer Brian J. Fox. It can read and execute commands from standard input devices or files. A security vulnerability exists in versions prior to Bash...

UBUNTU-CVE-2019-9813

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

PuTTY Random Number Reuse Vulnerability

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A random number reuse vulnerability exists in PuTTY versions prior to 0.71 used in cryptography. An attacker can exploit this vulnerability to potentially recycle random numbers used in...

PT-2019-19884 · Netdata +2 · Netdata +2

Name of the Vulnerable Software and Affected Versions: Netdata web application versions prior to 1.13.0 Description: The issue allows remote attackers to inject malicious HTML code into an imported snapshot. Successful exploitation can lead to the execution of attacker-supplied HTML in the contex...

KinagaCMS Cross-Site Scripting Vulnerability

KinagaCMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in KinagaCMS versions prior to 6.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Google Chrome integer overflow vulnerability (CNVD-2019-23138)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in PDFium in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to potentially perform out-of-bounds memory access via a crafted PDF file...

Upcoming Events Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is MyBB team developed a set of PHP and MySQL development of free and Web-based forum software. The software is easy to use , multi-language support , scalable , etc. Upcoming Events plugin is used in which a schedule management plugin . A cross-site scripting vulnerability...

CVE-2019-9591

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...

CVE-2019-5491

Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user...

WordPress Remote Code Execution Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress versions prior to 4.9.9 and 5.x prior to 5.0.1. A remote attacker...