EUVD-2019-8615

Malware in sbrugna...

EUVD-2019-8618

Malware in sbrugna...

PEAR Archive_Tar Improper Link Resolution Vulnerability

PEAR ArchiveTar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party...

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

PEAR ArchiveTar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drup...

15-Year-Old Bug in PEAR PHP Repository Could've Enabled Supply Chain Attacks

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code. "An attacker exploiting the first one could take over...

CVE-2019-18944

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS...

CVE-2019-18947

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

CVE-2019-18947

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

CVE-2019-18944

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS...

CVE-2019-18945

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability...

CVE-2019-18946

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation...

Information disclosure

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

Session fixation

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation...

Privilege escalation

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability...

CVE-2019-18944

The CVE-2019-18944 affects Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 and is described as a reflected XSS vulnerability. Connected sources corroborate the issue as a cross‑site scripting flaw in SBM prior to 11.7.1. The exact exploit details and affecte...

CVE-2019-18944

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS...

CVE-2019-18945

CVE-2019-18945 affects Micro Focus Solutions Business Manager Application Repository. A privilege escalation vulnerability is present in SBM/Serena SBM versions prior to 11.7.1. Exploitation details are not provided in the supplied documents, but multiple sources confirm the issue, with an explic...

CVE-2019-18947 information disclosure

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

CVE-2019-18947

Micro Focus Solutions Business Manager (SBM) Application Repository prior to version 11.7.1 is vulnerable to information disclosure. The issue arises from configuration and operational errors within a networked SBM deployment, allowing an unauthenticated or limited-privilege attacker to obtain se...

Micro Focus Solutions Business Manager 权限许可和访问控制问题漏洞

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. Micro Focus...