PT-2019-1956 · Oracle · Oracle General Ledger +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description: The issue is related to insufficient access control in the Consolidation Hierarchy Viewer component of Oracle E-Busines...

PT-2019-12012 · Podofo +5 · Podofo +5

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: An issue was discovered in the PdfPagesTreeCache class where there is an attempted excessive memory allocation due to the lack of validation of the nInitialSize variable. Recommendations: For PoDoFo version...

[Workspace App for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access their Citrix session, aka mobile thin client. The users usually have a docking station and two identical monitors at their workplace. When these users come back from a meeting and re-dock into...

Mozilla Firefox Security Advisories (MFSA2019-06, MFSA2019-08) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

PT-2019-16874 · Ibm · Ibm Sterling B2B Integrator

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Standard Edition Description: The issue allows highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man-in-the-middle...

PT-2019-11027 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee GetSusp versions 3.0.0.461 and earlier Description: The issue allows attackers to perform a Denial of Service DoS on a manual scan via a specifically crafted file, causing an infinite loop while scanning. GetSusp is a free standalone...

CVE-2018-9586

In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package verification is turned off and remains off due to a race condition. This could lead to local escalation of privilege with no additional execution...

Citrix Receiver 4.12 - App Launching issues

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When the new app loads it appears to disconnect the existing running apps momentarily and bring all...

PT-2018-2959 · Juniper Networks +1 · Junos +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S13 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D80 Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D130 Juniper Networks Junos OS 14.1X53 versions prior to...

Missing Origin Validation

Overview Versions of browserify-hmr prior to 0.4.0 are missing origin validation on the websocket server. This vulnerability allows a remote attacker to steal a developer's source code because the origin of requests to the websocket server that is used for Hot Module Replacement HMR are not...

LinkNet LW-N605R 12.20.2.1486 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Title: LW-N605R 12.20.2.1486 - Remote Code Execution Author: Nassim Asrir Vendor: LINK-NET Product Link: http://linknet-usa.com/main/productinfo.php?productsid=35&language=es Firmware version: 12.20.2.1486 CVE: N/A Description: LW-N605R...

Magiczoomplus for Virtuemart, 4.9.4, Insecure Folder Permissions

Virtuemart plugin magiczoomplus v4.9.4 and previous, Sensitive information disclosure, Insecure folder permissions, Remote call information disclosure. Resolution: Update to 4.9.6 Update notice: https://www.magictoolbox.com/jv-release-update/ Note that the VEL do not agree with the developer's...

rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is...

CVE-2017-5470

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird...

DRUPAL-CONTRIB-2018-038

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: . The security team marks all unsupported projects critical by default...

Debian: Security Advisory (DLA-1392-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-20009

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/belkinbulldog.rb 2025-08-30 18:19:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxn6qydnzh2j 2025-10-23...

CVE-2017-13216

In ashmemioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

App Layering: Nutanix AHV 5.5 support requires ELM 4.9 or above

App Layering 4.8 and before is not compatible with networking changes in Nutanix AHV 5.5. Depending on the operation you are performing, you may see any of these errors: Failed to connect to the server at 'host' A failure occurred connecting to the Nutanix server. Error = write EPROTO...

App Layering: Test SMB File Share function says permissions incorrect

When configuring a Network File Share for the ELM in App Layering, you get the error "Permissions incorrect on the file share for the path: . Please contact Support for more information."...