IBM Business Process Manager and IBM Business Automation Workflow XML External Entity Injection Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

IBM Security Identity Manager XML External Entity Injection Vulnerability

IBM Security Identity Manager from IBM is a policy-based, automated solution that manages user access across IT environments and helps drive effective identity management and governance across the enterprise. An XML external entity injection vulnerability exists in IBM Security Identity Manager...

The vulnerability of the GetPixelChannel function in the ImageMagick console-based graphics editor allows a hacker to cause a service failure or expose protected information.

The vulnerability of the GetPixelChannel function in the ImageMagick Core/pixel-accessor.h file is related to reading data beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures or disclose sensitive information through a...

The vulnerability of the ComplexImages function in the console-based graphic editor ImageMagick, which allows a hacker to cause a service failure or expose protected information

The vulnerability of the ComplexImages function MagickCore/fourier.c in the console-based graphic editor ImageMagick involves reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or disclose protected informati...

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software, related to the falsification of inter-site requests, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter allows a attacker to disclose protected information, read or write arbitrary data, or cause a denial-of-service attack.

The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter is related to errors in handling registration data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, read or write arbitrary data, or cause service...

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure and obtain confidential information.

The vulnerability in the driver /infiniband/core/uverbsmain.c of Linux operating systems arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause service failures...

IBM Intelligent Operations Center XML External Entity Injection Vulnerability

IBM Intelligent Operations Center IOC is a suite of city operations solutions from IBM in the United States. The product features data visualization and real-time collaboration. An XML external entity injection vulnerability exists in IBM IOC, which can be exploited by remote attackers to disclos...

CVE-2019-9140

When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a...

PT-2020-6191 · Openjpeg +9 · Openjpeg2 +9

Name of the Vulnerable Software and Affected Versions: openjpeg2 affected versions not specified Description: A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. This issue could allow an attacker to cause an application crash or, in some cases, execute arbitra...

GNU Binutils Input Validation Error Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to disclose sensitive information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the tcp_emu component of the hardware emulation software QEMU allows a hacker to disclose protected information.

The vulnerability of the tcpemu component slirp/tcpsubr.c of the QEMU hardware emulation software is related to incorrect initialization of data in calls to snprintf. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

MGASA-2019-0216 Updated virtualbox packages fix security vulnerabilities

OpenSSL versions 1.1.0 through 1.1.0j and 1.1.1 through 1.1.1b are susceptible to a vulnerability that could lead to disclosure of sensitive information or the addition or modification of data CVE-2019-1543. Oracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability that allows...

nienmade.com.cn Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-913334 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting nienmade.com.cn website and i...

D-Link DSL-2750U Authentication Bypass Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the D-Link DSL-2750U version 1.11. An attacker can exploit this vulnerability to cause a denial of service and disclose information...

D-Link DSL-2750U Authentication Bypass Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the login form in the D-Link DSL-2750U using firmware version 1.11. An attacker could exploit this vulnerability to cause a denial of service and disclose information...

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI interface on Windows operating systems is related to errors in processing memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

USN-4071-2 patch vulnerabilities

USN-4071-1 fixed several vulnerabilities in Patch. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2019-136...