799 matches found
Advantech WebAccess Authorization Issues Vulnerability (CNVD-2019-32470)
Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability exists...
PT-2019-14599
Name of the Vulnerable Software and Affected Versions OpenCV version 4.1.1 Description The issue is related to an out-of-bounds read in the hal baseline::v load function located in core/hal/intrin sse.hpp, which is called from computeSSDMeanNorm in modules/video/src/dis flow.cpp. Recommendations...
PT-2019-7062 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 4.1.0 Description: The issue concerns JavaScript injections in the wp-live-chat-support plugin for WordPress. Recommendations: For versions prior to 4.1.0, update to version 4.1.0 or later to...
CVE-2019-0348
SAP BusinessObjects Business Intelligence Platform Web Intelligence, versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted...
CVE-2019-0331
Under certain conditions, SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure...
UBUNTU-CVE-2019-10203
PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS...
aquaverde Aquarius CMS Access Control Error Vulnerability
aquaverde Aquarius CMS is a content management system CMS from aquaverde Switzerland. An access control error vulnerability exists in log files in versions of aquaverde Aquarius CMS prior to 4.1.1. The vulnerability arises from a network system or product that does not properly restrict access to...
CVE-2019-6169
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...
Apple iOS Core Bluetooth Component Memory Corruption Vulnerability
Apple iOS is an operating system for mobile devices developed by Apple Inc. Core Bluetooth is one of the core Bluetooth components. A security vulnerability exists in the Core Bluetooth component in Apple iOS versions prior to 11.4.1. The vulnerability can be exploited to execute arbitrary code...
CVE-2018-4327
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1...
CVE-2018-4290
A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2...
CVE-2018-4274
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
DEBIAN-CVE-2018-4270
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...
CVE-2018-4275
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1...
CVE-2018-4216
A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
pfSense Access Restriction Bypass Vulnerability (CNVD-2019-08722)
pfSense is a set of network firewalls based on FreeBSD Linux. A security signature issue vulnerability exists in pfSense version 2.4.41. A remote attacker can exploit this vulnerability to bypass access restrictions...
CVE-2018-1000881
Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web application request by a...
UBUNTU-CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bcsvcprocess use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and ...