CVE-2019-7085

CVE-2019-7085 affects Adobe Acrobat and Reader windows/macOS with vulnerable builds including 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. The Red Hat and Nessus entries corroborate a buffer‑errors vulnerability that could allow arbitrary code execution,...

CVE-2019-7020

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...

Code injection

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7020

Adobe Acrobat/Reader on Windows and macOS is affected by CVE-2019-7020 (buffer errors) and related issues described in APSB19-07. The vulnerabilities affect versions prior to 2019.010.20091 (macOS/Windows) and 2015.006.30464–2017.011.30113–2019.010.20069 family, with successful exploitation leadi...

CVE-2019-7020

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...

The vulnerability of the fxp0 interface implementation in the Junos operating system, which allows a intruder to cause a service failure.

The vulnerability of the fxp0 interface implementation in the Junos operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Junos operating system, related to security configuration errors, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the Junos operating system is related to errors in security settings. Exploiting this vulnerability can allow a malicious actor, acting remotely, to compromise the integrity and accessibility of protected information...

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

CVE-2018-7851

CVE-2018-7851 involves buffer errors (CWE-119) in Schneider Electric Modicon PLCs. Affected products and firmware histories include: Modicon M580 with firmware prior to v2.50, Modicon M340 prior to v3.01, BMxCRA312xx prior to v2.40, and all firmware versions of Modicon Premium and 140CRA312xxx. T...

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

Mozilla Firefox ESR Security Advisories (MFSA2019-09, MFSA2019-14) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2019-12, MFSA2019-14) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

The vulnerability of the Spring Framework software, related to security configuration errors, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Spring Framework is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the information being protected...

The vulnerability of the Apache ActiveMQ software platform, related to security configuration errors, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the Apache ActiveMQ software platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-22232)

Intel Xeon Scalable Processors are products of Intel Corporation.Intel Xeon Scalable Processors is a scalable server central processing unit CPU.Intel Xeon Processor E7 v4 Family is a Xeon E7 series server central processing unit CPU.Intel Xeon Processor E5 v4 Family is a Xeon E5 series server...

May 14, 2019—KB4499171 (Monthly Rollup)

None None...

Gemalto Ezio Server Information Disclosure Vulnerability

Gemalto Ezio Server is an authentication server from Gemalto USA. An information disclosure vulnerability exists in Gemalto Ezio Server versions prior to 3.1.0. The vulnerability arises from errors in the configuration of a networked system or product during operation, and can be exploited by an...

rubygems: Escape sequence injection vulnerability in errors

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManagerrun calls alerterror without escaping, escape sequence injection is possible. There are many ways to cause an error...

Kernel update: Virtuozzo ReadyKernel patch 78.0 for Virtuozzo 7.0 Updates 9, 10 and Virtuozzo Infrastructure Platform 2.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-862.20.2.vz7.73.24 and 3.10.0-862.20.2.vz7.73.29 Virtuozzo 7.0 Update 9 and Virtuozzo Infrastructure Platform 2.5 and 3.10.0-957.10.1.vz7.85.17 Virtuozzo 7.0 Update 10. Vulnerabili...

CVE-2019-4071

IBM Tivoli Storage Productivity Center IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063...