PT-2019-2169

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2173

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2226

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

Gemalto Ezio Server Information Disclosure Vulnerability

Gemalto Ezio Server is an authentication server from Gemalto USA. An information disclosure vulnerability exists in Gemalto Ezio Server versions prior to 3.1.0. The vulnerability arises from errors in the configuration of a networked system or product during operation, and can be exploited by an...

PT-2019-2230

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code,...

PT-2019-2168

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2160

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

PT-2019-2163

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

PT-2019-2161

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

PT-2019-2174

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

rubygems: Escape sequence injection vulnerability in errors

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManagerrun calls alerterror without escaping, escape sequence injection is possible. There are many ways to cause an error...

Kernel update: Virtuozzo ReadyKernel patch 78.0 for Virtuozzo 7.0 Updates 9, 10 and Virtuozzo Infrastructure Platform 2.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-862.20.2.vz7.73.24 and 3.10.0-862.20.2.vz7.73.29 Virtuozzo 7.0 Update 9 and Virtuozzo Infrastructure Platform 2.5 and 3.10.0-957.10.1.vz7.85.17 Virtuozzo 7.0 Update 10. Vulnerabili...

CVE-2019-4071

IBM Tivoli Storage Productivity Center IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063...

Information Disclosure Vulnerability in Multiple Qualcomm Products (CNVD-2019-13771)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An information disclosure vulnerability exists in multiple Qualcomm products. The vulnerability arises fro...

Security update for hostinfo, supportutils (important)

openSUSE Security Update: Security update for hostinfo, supportutils Announcement ID: openSUSE-SU-2019:1351-1 Rating: important References: 1054979 1099498 1115245 1117751 1117776 1118460 1118462 1118463 1125623 1125666 Cross-References: CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639...

Spring Framework ResourceHttpRequestHandler DoS

The vulnerability of the ResourceHttpRequestHandler implementation in the Spring Framework’s software platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog and InfoSphere Information Server on Cloud Information Disclosure Vulnerabilities

IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog, and InfoSphere Information Server on Cloud are products of IBM USA. An information disclosure vulnerability exists in IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog, and InfoSphere...

Arbitrary Code Execution

Firefox, Firefox ESR and Thunderbird are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable Memory Handler component to execute arbitrary code via various memory errors which may occur...

Buffer Overflow

The X11 Xorg libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol da...

PT-2019-2059 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A vulnerability in the remote access VPN session manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on...