gnuplot resource management error vulnerability

gnuplot is a command line interactive tool that allows the user to convert datasets and data functions into easy-to-see planar or three-dimensional shapes by entering commands. A security vulnerability exists in gnuplot version 5.5. The vulnerability stems from a double free execution of...

PT-2020-16110 · Gnu +5 · Gnuplot +5

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.5 Description: The issue is related to a double free error when executing the function to set output. This error may lead to arbitrary code execution, depending on the context in which it is exploited. Recommendations: For...

PT-2020-15764 · Savsoft · Savsoft Quiz

Name of the Vulnerable Software and Affected Versions: Savsoft Quiz versions 5.5 and earlier Description: The issue allows an attacker to inject a malicious payload in the User Registration section. When the admin visits the manage user section from the admin panel, the payload triggers, enabling...

PT-2020-14567 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole version 5.5.0.64 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism ca...

Code execution vulnerability in PHPOK 5.5 (CNVD-2020-45155)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A code execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

Linux kernel buffer overflow vulnerability (CNVD-2020-37934)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The 'mwifiexcmdappendvsietlv' function in the drivers/net/wireless/marvell/mwifiex/scan.c file in versions of the Linux kernel prior to 5.5.4 has a buffer overflow...

HCL Technologies Connections Open Redirect Vulnerability

HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. An open redirection vulnerability exists in HCL Technologies Connections versions 5.5, 6.0 and 6.5, which arises from a network system or product that does not properly validate incoming dat...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

HCL Technologies Connections Information Disclosure Vulnerability

HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. A security vulnerability exists in HCL Technologies Connections version 6.5, 6.0 and 5.5. The vulnerability can be exploited by an attacker to gain access to sensitive information...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-2676

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Printing. The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...

Kirona Solutions Dynamic Resource Scheduling Information Disclosure Vulnerability

Kirona Solutions Dynamic Resource Scheduling DRS is a suite of dynamic resource scheduling software for field services from Kirona Solutions, UK. A security vulnerability exists in Kirona DRS version 5.5.3.5. The vulnerability can be exploited by an attacker to obtain SQL database information suc...

CVE-2019-17132

vBulletin through 5.5.4 mishandles custom avatars...

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

Foxit PDF SDK ActiveX License Issue Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from a lack o...

Foxit PDF SDK ActiveX Buffer Overflow Vulnerability (CNVD-2019-21947)

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. A remote attacker can...

Foxit PDF SDK ActiveX File Write Vulnerability

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. Foxit PDF SDK ActiveX 5.5.0 and earlier versions in the use of JavaScript API Doc.exportAsFDF file...

Foxit PDF SDK ActiveX Command Injection Vulnerability (CNVD-2019-21955)

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. A command injection vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. The...

mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure wher...