The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise...

The vulnerability of the twisted.web network framework’s Twisted component allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the twisted.web network framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of protected information by introducing invalid characters like CRLF...

The vulnerability of Cisco Email Security Appliance’s security systems, which stems from insufficient validation of input data, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of Cisco Email Security Appliance’s security systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...

Validation Bypass

Apache Kafka is vulnerable to Validation Bypass. An authenticated attacker with Write Permission can manually craft a Produce Request which bypasses ACL validation, affecting data integrity...

PT-2019-4555

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 68 Description The issue is related to the incorrect handling of certain Unicode characters during web content parsing, which can lead to the execution of malicious code and evade cross-site scripting XSS filtering...

PT-2019-4551

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 68 Description The issue is related to an error in the CertificateVerify service of the Network Security Services NSS, which can be exploited by a remote attacker to impact data integrity. Specifically, it is possible...

PT-2019-4583

Name of the Vulnerable Software and Affected Versions SAP Gateway versions 7.5 through 7.53 Description The issue allows an attacker to inject content that is displayed as an error message, potentially misleading users into believing the information comes from a legitimate service. This is due to...

The vulnerability of clients under comprehensive network endpoint protection from Check Point Endpoint Security, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Check Point Endpoint Security’s comprehensive network endpoint protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information through a specially...

jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921)

A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

A flaw was found in libssh2. A server could send a multiple keyboard interactive response messages, whose total length are greater than the unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error. The highest threat from this...

jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921)

A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Error Concealment

...

PT-2019-5104

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient data validation in downloads, which could allow a remote attacker to impact data integrity. Specifically, it allowed a remote attacker to spoof the...

The vulnerability of the monitoring panel for Cisco Unified Intelligence Center’s reporting functions allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the monitoring panel for creating Cisco Unified Intelligence Center reports is related to improper control of resource identifiers. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information by usin...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the EnterpriseDB database management system’s installer allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EnterpriseDB database management system’s installer relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2019-5110

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.80 Description The issue is related to insufficient data validation in the Blink component of Google Chrome, which can be exploited by a remote attacker through a specially crafted HTML page. This can...

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in the lack of proper input data validation. This allows attackers to execute cross-site scripting attacks and compromise the integrity of protected information.

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks and compromise the integrity of protected...

The software vulnerabilities of Microsoft SharePoint Foundation allow attackers to execute cross-site scripting attacks and compromise the integrity of protected information, due to insufficient validation of input data.

The vulnerability of Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks remotely and affect the integrity of protected information by sending a specially craft...