CVE-2019-17052

ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...

Code injection

ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...

CVE-2019-17054

atalkcreate in net/appletalk/ddp.c in the AFAPPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c...

CVE-2019-17053

ieee802154create in net/ieee802154/socket.c in the AFIEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7...

CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

CVE-2019-17052

ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...

CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

CVE-2019-16744

eBrigade before 5.0 has evenements.php cid SQL Injection...

Memory corruption

In the Linux kernel before 5.0.3, a memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...

CVE-2019-16994

In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...

CVE-2019-16744

CVE-2019-16744 affects the eBrigade web application prior to version 5.0. The vulnerability is a SQL injection in evenements.php (cid parameter as described in multiple sources), allowing an attacker to execute arbitrary SQL commands via the application’s input. Impact is reported as high in CVE ...

Session fixation

In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...

SQL Injection Vulnerability in Xi'an Power Infinite Information Technology Co.

Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...

Microsoft DirectWrite AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readCharset

Microsoft DirectWrite AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readCharset -----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library...

Sql injection

CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...

CVE-2019-11880

CVE-2019-11880 affects CommSy

CVE-2019-11880

CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...

CommSy 8.6.5 SQL Injection

Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-16 Send details to the vendor...

SQL injection vulnerability in the cid parameter of the ne***.asp page of the website builder system of Chengdu Power Infinite Technology Co.

Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...

CommSy 8.6.5 - SQL injection

Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-16 Send details to the vendor...