LibreOffice LibreLogo Code Execution

The vulnerability of the LibreLogo software module in the LibreOffice office software package stems from errors in URL processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted file...

Windows RDP DoS

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

PT-2019-5545

Name of the Vulnerable Software and Affected Versions SQLite versions 3.30.1 and earlier Description The issue is related to errors in handling numbers, which can be exploited by a remote attacker to cause a denial of service. It is also reported that certain SELECT statements with a nonexistent...

JDK: Failure to privatize a value pulled out of the loop by versioning

All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...

PT-2019-3208

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Audio Service. It occurs when a malformed parameter is processed, allowing an attacker to...

PT-2019-3303

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite application programming interface of Windows operating systems. Exploitation of this issue may allow ...

PT-2019-3304

Name of the Vulnerable Software and Affected Versions Windows Network Connectivity Assistant affected versions not specified Description The issue is related to errors in handling objects in memory. It may allow an attacker to elevate their privileges and execute arbitrary code using a specially...

PT-2019-3185

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Microsoft SharePoint. This vulnerability is associated with session management errors. An attacker who...

PT-2019-3176

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code usi...

Cisco RoomOS Permission Bypass

The vulnerability of the Cisco RoomOS operating system is related to permission handling errors. Exploiting this vulnerability allows an attacker to write arbitrary files to the device’s file system with root privileges...

Cisco HyperFlex Web Interface Arbitrary Action

The vulnerability of the web interface for managing Cisco HyperFlex infrastructure is related to errors in authenticating the requests being executed. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device using a specially crafted link...

OpenSSL Certificate Validation Data Compromise

The vulnerability of the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

Information disclosure

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

CVE-2019-11549

Removed by vendor...

When closing and re-opening Workspace on IOS, refreshing or launching apps causes failure.

After IOS has enumerated and/or launched apps through Storefront via Netscaler Gateway, and the Workspace app is closed but not logged out, when re-opening Workspace you get failure when refreshing apps or launching new ones. Error message seen if clicking an app after re-opening workspace -...

Google Android Information Disclosure Vulnerability (CNVD-2019-37948)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android version 10. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

Mozilla Firefox ESR Security Advisories - 1 - (MFSA2019-25, MFSA2019-27) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...