PT-2020-5627 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: QEMU versions 4.0 through 4.1.0 Description: The issue is related to the rom copy function in hw/core/loader.c, which does not properly validate the relationship between two addresses. This allows attackers to trigger an invalid memory copy...

PT-2019-5230 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.33.1 Description: The issue allows attackers to bypass the Title blacklist protection mechanism. This can be achieved by starting with an arbitrary title, establishing a non-resolvable redirect for the associated...

OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

The vulnerability of Skia, a graphics engine used by Google Chrome, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Skia graphics engine in Google Chrome browsers is related to writing beyond the buffer limits of the memory buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information throu...

The vulnerability of the RouterOS operating system, which arises due to insufficient validation of input data, allows a hacker to cause damage to the integrity of DNS system data.

The vulnerability of the RouterOS operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause damage to the integrity of DNS system data...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures throug...

UBUNTU-CVE-2019-14901

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability ...

The vulnerability of the jQuery.extend function (true, {}, …) in the jQuery library allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the jQuery.extend function exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

CVE-2019-10172

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries such that an XML external entity XXE vulnerability affects codehaus's jackson-mapper-asl libraries. This vulnerability is similar to CVE-2016-3720. The primary threat from this flaw is data integrity...

The vulnerability of the FortiOS operating system, the FortiAnalyzer network firewall, and the FortiManager centralized management system lies in the lack of mechanisms for checking certificate revocation. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the FortiOS operating system, FortiAnalyzer network firewall, and FortiManager centralized management system are related to the lack of verification for certificate revocation. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality,...

PT-2019-5307

Name of the Vulnerable Software and Affected Versions org.codehaus.jackson:jackson-mapper-asl versions 1.9.x Description A flaw was found in the org.codehaus.jackson:jackson-mapper-asl library, related to incorrect restriction of XML external entity references. This issue is similar to previously...

CVE-2019-18683

A flaw was found in the Linux kernel. Multiple race conditions were found in the vivid driver leading to privilege escalation and in at least one case a use-after-free condition. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2019-17340

A flaw was found in xen. When the code processing grant table transfer requests finds a page with an address too large to be represented in the interface with the guest, it allocates a replacement page and copies page contents. The page as well as certain other remnants of an affected guest will ...

CVE-2019-18425

A flaw was in Xen. Guest specified limits for descriptor table access, during PV guest operations, were found to not be enforced. An attacker with the ability to emulate 32-bit guest user mode calls through call gates, would be allowed to install and then use descriptors of their choice as long a...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

The vulnerability of the Cisco HyperFlex hyper-converged infrastructure’s statistical collection service allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Cisco HyperFlex hyper-converged infrastructure’s statistical collection service is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

CVE-2019-4556

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205...

CVE-2019-4556

CVE-2019-4556 affects IBM QRadar Advisor With Watson. Affected versions are 1.0.0–2.4.0; root cause is incomplete input validation due to insufficient input-length controls (incomplete blacklisting), allowing bypass of application controls and impacting system and data integrity. Remediation avai...

CVE-2019-4556

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...