DEBIAN-CVE-2019-15214

An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c...

cPanel Access Control Error Vulnerability (CNVD-2019-29602)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker could exploit the vulnerability to delete dat...

CVE-2019-7851

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages...

CVE-2019-7851

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages...

CVE-2019-7851

CVE-2019-7851 is a cross-site request forgery vulnerability in Magento 2.1 before 2.1.18, 2.2 before 2.2.9, and 2.3 before 2.3.2 that can lead to unintended data deletion from customer pages. Root cause: CSRF in the affected Magento components. Remediation: apply the security updates—2.1.18, 2.2....

CVE-2019-7851

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages...

CVE-2017-18404

cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD SEC-341...

CVE-2017-18404: Improper Access Control

cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD SEC-341...

PT-2019-8339

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows domain data to be deleted for domains with the .lock TLD. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

PT-2019-18777

Name of the Vulnerable Software and Affected Versions Magento 2.1 versions prior to 2.1.18 Magento 2.2 versions prior to 2.2.9 Magento 2.3 versions prior to 2.3.2 Description A cross-site request forgery issue can lead to unintended data deletion from customer pages. Recommendations For Magento 2...

CVE-2019-7851: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages...

Oracle Database Server Data Modification

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data using the Oracle Net protocol stack...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26533)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An Access Control Error vulnerability exists in the InnoDB component of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An...

Nextcloud: User can delete data in shared folders he's not autorized to access

Steps to reproduce 1. create a group folder named TEST and share with "admin group" and "test group", marking the advanced permission flag 2. create two folders inside the main share: visible and invisible 3. inside "invisible" folder create a test file let's say something like "test.txt" 4. set...

PT-2019-12941

Name of the Vulnerable Software and Affected Versions ThoughtSpot versions 4.4.1 through 5.1.1 Description The issue allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests,...

Amazon Admits Alexa Voice Recordings Saved Indefinitely

Amazon has acknowledged that it retains the voice recordings and transcripts of customers’ interactions with its Alexa voice assistant indefinitely. The admission raises questions about how long companies should be able to save highly-personal data collected from voice assistant devices. After U....

About the security content of AirPort Base Station Firmware Update 7.9.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of AirPort Base Station Firmware Update 7.9.1

About the security content of AirPort Base Station Firmware Update 7.9.1 This document describes the security content of AirPort Base Station Firmware Update 7.9.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

Siebel Core Server BizLogic Script Data Manipulation DoS

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management software – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, and...