4414 matches found
CVE-2019-16891
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload...
CVE-2019-16891
CVE-2019-16891 affects Liferay Portal CE 6.2.5 (and related CVE mappings) and is described as remote command execution caused by deserialization of a JSON payload. The connected records corroborate deserialization-based RCE for Liferay Portal CE 6.2.5, with CVSS metrics indicating a high/severe i...
CVE-2019-16891: Deserialization of Untrusted Data
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload...
DEBIAN-CVE-2019-16884
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfslinux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory...
Cisco RoomOS Software License Issues Vulnerability
Cisco RoomOS Software is the United States Cisco Cisco company's set of automatic management software for Cisco devices. The software is mainly used to upgrade, manage the motherboard firmware of Cisco devices. An authorization issue vulnerability exists in versions of Cisco RoomOS Software prior...
Design/Logic Flaw
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
CVE-2019-5467
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
CVE-2019-5467
GitLab CE/EE Wiki pages were affected by a stored XSS due to an input validation and output encoding flaw in how Wiki Markdown links were processed. The issue could allow a persistent XSS when a wiki page is crafted with crafted input (as demonstrated by stored-XSS scenarios in the HackerOne repo...
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
PT-2019-17691 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 11.11.6 GitLab CE/EE versions prior to 12.0.4 GitLab CE/EE versions prior to 12.1.2 Description: An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint, which could result in disclosu...
PT-2019-17692 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 11.11.6 GitLab CE/EE versions prior to 12.0.4 GitLab CE/EE versions prior to 12.1.2 Description: An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature, which could...
CVE-2019-5463: Exposure of Sensitive Information to an Unauthorized Actor
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
CVE-2019-5467: Improper Neutralization of Input During Web Page Generation
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
CE Remote Display Privilege Escalation
The vulnerability of the CE Remote Display software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
PT-2019-3085
Name of the Vulnerable Software and Affected Versions CE Remote Display affected versions not specified Description The issue exists due to insufficient input validation in the software. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...
openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-2021)
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Docker : - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot bsc1143409. - CVE-2019-13509: Fixed an information leak in the debu...
Johnson Controls MS-NCE2560-0 Metasys NCE Controller
Binary data 764890.prm...