Moderate severity vulnerability that affects roundup

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

PT-2019-1776 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...

Apple Safari < 12.0.3 Multiple Vulnerabilities

Binary data 700508.prm...

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

CVE-2019-10904

CVE-2019-10904 affects Roundup 1.6: XSS via the URI caused by improper 404 handling in the web front-end, specifically in frontend/roundup.cgi and roundup/cgi/wsgi_handler.py. Practical impact is client-side code execution due to crafted URIs. Exploitation details are not provided in the supplied...

The vulnerability of the PostgreSQL database management system, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of the PostgreSQL database management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...

The vulnerability of the RichFaces library, related to errors in code generation, allows attackers to execute arbitrary Java code.

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...

openSUSE Security Update : nextcloud (openSUSE-2019-640)

This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

The vulnerability of the Windows operating system, related to resource release errors, allows a perpetrator to cause a service failure.

The vulnerability of the Windows operating system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines.

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines. As per the CDF logs uploaded, there found exceptions related to communication for Get-ProvTask execution. 261057,0,2019/03/18 13:19:16:45184,6716,2288,1,Xendesktop...

Fedora 29 : libssh2 (2019-f31c14682f)

This update addresses various overflow conditions that could result in possible memory read/write out of bounds errors or zero byte allocations when connected to a malicious server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

The vulnerability of the application programming interface for accessing ActiveX Data Objects (ADO) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the network stack implementation in Cisco NX-OSS devices allows a hacker to induce a service failure.

The vulnerability of the network stack implementation in Cisco NX-OSS devices relates to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerabilities of Microsoft Edge and Internet Explorer involve memory object processing errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer exist due to errors in memory object handling. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

The vulnerability of the virtualization protocol implementation in the Cisco NX-OS network operating system for Cisco Nexus 9000 routers allows a attacker to cause service interruptions.

The vulnerability of the N-port virtualization protocol implementation in the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions by directing FCo...