CVE-2019-15637

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

Multiple Intel Products Session Authentication Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A session authentication vulnerability exists in the system firmware of multiple Intel products, which originates from a program's failure to perform sufficient session authentication and can be exploited by a local attacke...

tw.vlip-gid.lv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-952225 Security Researcher Hchabik Helped patch 2378 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting tw.vlip-gid.lv website and i...

RHEL 7 : Ansible (RHSA-2019:2544)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2544 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 : Ansible (RHSA-2019:2545)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2545 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 / 8 : Ansible (RHSA-2019:2542)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2542 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update

An update for Ansible is now available for Ansible Engine 2.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update

An update for Ansible is now available for Ansible Engine 2.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: Ansible security update

An update for Ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Moderate: Red Hat Security Advisory: Ansible security update

An update for Ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Design/Logic Flaw

An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate permissions can leverage OTRS notification tags in templates in order to...

IBM InfoSphere Information Governance Dashboard and InfoSphere Information Server on Cloud Information Disclosure Vulnerability

IBM InfoSphere Information Server on Cloud and IBM InfoSphere Information Server are both products of IBM Corporation, U.S.A. IBM InfoSphere Information Server on Cloud is a set of cloud-based data consolidation IBM InfoSphere Information Server is a data integration platform. IBM InfoSphere...

IBM Security Guardium Big Data Intelligence XML External Entity Injection Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. An XML external entity injection vulnerability exists in IBM...

CVE-2019-2129

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2019-4425

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force ID: 162771...

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL involves errors in code generation. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

IBM InfoSphere Global Name Management Code Issue Vulnerability

IBM InfoSphere Global Name Management is a global name management solution from IBM, USA. The product is primarily used to manage, search, analyze and compare multicultural name datasets. A code issue vulnerability exists in IBM InfoSphere Global Name Management. An attacker could exploit the...

The vulnerability of the “jhash” hash function in the Linux operating system’s kernel allows a hacker to disclose sensitive information that is protected by this function.

The vulnerability of the “jhash” hash function in the Linux operating system’s kernel is related to errors in the processing of identifier fields. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted web page...