PT-2019-1027

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: An issue in the Gem::GemcutterUtilities module of RubyGems may output the API response to stdout as it is, potentially leading to escape sequence injection if the API side modifies the response...

PT-2019-1025

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: The issue is related to insufficient escaping in the Gem::UserInteraction module of the RubyGems package management system. This allows a remote attacker to inject escape sequences, potentially...

PT-2019-1026

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: An issue in RubyGems allows the gem owner command to output the contents of the API response directly to stdout. This can lead to escape sequence injection if the response is crafted, potential...

PT-2019-4543

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 66 Description The issue is related to the FTP protocol in Firefox, where an error in initiating a modal notification can occur when a page reload is initiated, allowing arbitrary text sent over an FTP connection to b...

PT-2019-5423 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.6 Description: An issue in the Linux kernel's network subsystem is related to errors in pointer counting in the functions rx queue add kobject and netdev queue add kobject in net/core/net-sysfs.c. This issue...

CVE-2019-1003029

A flaw was found in the Jenkins Script Security plugin version 1.53. An attacker with Overall/Read permissions is able to escape the sandbox and execute arbitrary code on the Jenkins master JVM. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

The vulnerability in the iOS client application of the Cisco Webex Teams software allows a perpetrator to compromise the integrity of protected information or cause service failures.

The vulnerability in the iOS client application of the Cisco Webex Teams collaboration software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information or cause service failures...

The vulnerability of the EMC Avamar Client Manager component of the Dell EMC Avamar Server backup system allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the EMC Avamar Client Manager component of the Dell EMC Avamar Server backup system is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a special...

PT-2019-3452

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.75 Description The issue is related to incorrect inheritance of a new document's policy in Content Security Policy, allowing a remote attacker to bypass content security policy via a crafted HTML page...

PT-2019-4615

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.75 Description The issue is related to incorrect handling of download origins in Navigation, allowing a remote attacker to perform domain spoofing via a crafted HTML page. Additionally, it involves an...

PT-2019-4616

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.75 Description The issue is related to insufficient policy enforcement in Content Security Policy, allowing a remote attacker to bypass content security policy via a crafted HTML page. This could...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript, related to type conversion errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to type conversion errors. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2019-5751

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 4.9 Description A flaw was found in Mercurial that allows an attacker to use symlinks and subrepositories to defeat Mercurial's path-checking logic, potentially writing files outside a repository. This issue is...

Securing CDN Delivery with TLS at Massive Scale

The growth of HTTPS on the Internet Amidst ever-growing security concerns, providing protected Internet connections is more important than ever. The movement towards an Internet that places more emphasis on data integrity and confidentiality is taking place swiftly. HTTP connections are giving wa...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

CVE-2018-12180

A flaw was found in edk2. When registering a RAM disk whose size is not a multiple of 512 bytes, the BlockIo protocol produced by the RamDiskDxe driver will incur memory read/write overrun. The memory overrun will happen when reading/writing the last block on the RAM disk. The highest threat from...

The vulnerability of the Storage Service component in the Windows operating system allows attackers to enhance their privileges and affect the confidentiality and integrity of the protected information.

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality and integrity of the protected information through a speciall...