PT-2019-5511 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A Heap Overflow vulnerability was found in the mwifiex set wmm params function of the Marvell Wifi Driver in the Linux Kernel. This issue is related to buffer overflow errors...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2602 DESCRIPTION: An unspecified...

PT-2019-16218 · Google +7 · Android +7

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible double free in the ParseContentEncodingEntry function of mkvparser.cc due to a missing reset of a freed pointer. This could lead to remote code execution with no...

PT-2019-18002 · Lenovo · Thinkpad

Name of the Vulnerable Software and Affected Versions: ThinkPad systems affected versions not specified Description: A reported issue in certain ThinkPad systems' BIOS could allow a user with administrative privileges or physical access to update the Embedded Controller with unsigned firmware...

PT-2019-14015 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is related to a double free in the Cu6mPlayer class located in u6m.h. Recommendations: For AdPlug version 2.3.1, at the moment, there is no information about a newer version that contains a fix for...

PT-2019-9521 · Prospecta · Prospecta Master Data Online

Name of the Vulnerable Software and Affected Versions: Prospecta Master Data Online MDO version 2.0 Description: The issue is related to Stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Security Bulletin: IBM MQ Appliance is affected by a GNU C library (glibc) vulnerability (CVE-2017-8804)

Summary IBM MQ Appliance has addressed a vulnerability in GNU C library glibc. Vulnerability Details CVEID: CVE-2017-8804 DESCRIPTION: glibc is vulnerable to a denial of service, caused by improper handling of buffer deserialization in the xdrbytes and xdrstring functions. By sending a...

PT-2019-2972 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: The issue is related to an out-of-bounds operation in memory within the Windows Jet Database Engine of Windows operating systems. This can be exploited by an attacker to...

PT-2019-3034 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to improper input validation from a privileged user on a guest operating system, allowing an attacker to cause the host server to crash by...

PT-2019-3064 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge HTML-based affected versions not specified Description: A remote code execution issue exists in the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the contex...

PT-2019-3067 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

PT-2019-2978 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to the way the scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the context of the...

PT-2019-3027 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A denial of service issue exists due to improper handling of objects in memory by Windows. An attacker could exploit this by running a specially crafted application on an affected system,...

PT-2019-3030 · Microsoft · Xmllite +1

Name of the Vulnerable Software and Affected Versions: Windows XmlLite versions affected versions not specified Description: A denial of service issue exists due to improper parsing of XML input by the XmlLite runtime. This could allow a remote unauthenticated attacker to cause a denial of servic...

PT-2019-11777 · Jenkins · Jenkins Codefresh Integration Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Codefresh Integration Plugin versions 1.8 and earlier Description: The issue concerns the Jenkins Codefresh Integration Plugin, which unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. This...

PT-2019-11772 · Jenkins · Jenkins Wall Display Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Wall Display Plugin versions 0.6.34 and earlier Description: A reflected cross-site scripting issue allows attackers to inject arbitrary HTML and JavaScript into web pages. The customTheme query parameter is not properly escaped,...

PT-2019-3142 · Cisco · Cisco Email Security Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance ESA affected versions not specified Description: The issue is related to the Sender Policy Framework SPF component of the Cisco Email Security Appliance ESA, which has a vulnerability due to insufficient input...

PT-2019-13130 · Denx Software Engineering +2 · Das U-Boot +2

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions 2016.09 through 2019.07-rc4 Description: The issue arises when Das U-Boot attempts to read a crafted ext4 filesystem, leading to a stack buffer overflow due to excessive data being memset. This overflow could potentially...

PT-2019-13784 · Adplug Team · Adplug

Name of the Vulnerable Software and Affected Versions: AdPlug version 2.3.1 Description: The issue is a heap-based buffer overflow in the CxadbmfPlayer:: bmf convert stream function, located in bmf.cpp. Recommendations: For AdPlug version 2.3.1, at the moment, there is no information about a newe...

PT-2019-19665 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue is related to a missing bounds check in the Pixel C USB monitor driver, which could lead to a possible out-of-bounds OOB write. This could result in local escalation of...