CVE-2019-19208: Improper Control of Generation of Code

Codiad Web IDE through 2.8.4 allows PHP Code injection...

PT-2020-10088

Name of the Vulnerable Software and Affected Versions Codiad Web IDE versions through 2.8.4 Description The issue allows PHP code injection. Recommendations For versions through 2.8.4, update to a version later than 2.8.4 to resolve the issue...

QEMU 'ide_dma_cb()' function denial of service vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in the 'idedmacb' function in the hw/ide/core.c file in QEMU versions 2.4.0 through 4.2.0. An...

DEBIAN-CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

PT-2019-4874 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.4.0 through 4.2.0 Description: An issue was discovered in the ide dma cb function, which can cause the QEMU process in the host system to crash via a special SCSI IOCTL SEND COMMAND. This issue implies that the size of...

CVE-2019-20175: Improper Check for Unusual or Exceptional Conditions

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

PT-2019-5280

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a null pointer dereference in QEMU, which can lead to a denial of service. Specifically, the ahci commit buf function in ide/ahci.c is vulnerable when the command header...

JetBrains IntelliJ IDEA has an unspecified vulnerability (CNVD-2019-40597)

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA that stems from the program logging server credentials in plaintext to the IDE configuration file. No details of the...

RIPS 3.2: Patch Generation and New IDE Integrations

Automated Patch Generation RIPS scans your source code for critical security vulnerabilities fully automated in only a few minutes. But the most time-intense task when securing your application is to research and to write code patches that fix all the detected security problems sufficiently...

PT-2019-13208

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue is related to a User Mode Write AV starting at a specific memory location, IDE ACDStd!JPEGTransW+0x00000000000024ed. This suggests a problem with the way the software handles certain operations,...

PT-2019-13210

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!IEP SetColorProfile+0x00000000000b9e7a. Recommendations For ACDSee Free version 1.1.21, at the moment, there is n...

PT-2019-13212

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!IEP SetColorProfile+0x00000000000c47ff, which may indicate a problem with memory access or handling...

PT-2019-13211

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IEP SetColorProfile+0x00000000000b9c2f, in the IDE ACDStd module. Recommendations For ACDSee Free version 1.1.21, at the...

PT-2019-13209

Name of the Vulnerable Software and Affected Versions ACDSee Free version 1.1.21 Description The issue concerns a User Mode Write AV starting at a specific memory location, IDE ACDStd!JPEGTransW+0x0000000000002450. This suggests a problem related to the handling of JPEG transactions within the...

CVE-2019-9872

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-9873

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...

Design/Logic Flaw

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-9873

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...