Information disclosure

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...

CVE-2019-0352

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...

CVE-2019-0352

In SAP BusinessObjects BI Platform (pre-4.1/4.2/4.3), dynamic pages (e.g., JSP) are cached, enabling an attacker to view cached, sensitive information and access dynamic pages even after logout. The available sources describe this as an information-disclosure issue but do not provide remediation ...

Microsoft Exchange Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires...

Windows Network Connectivity Assistant Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacke...

Microsoft Windows and Microsoft Windows Server Privilege Mobilization Vulnerability (CNVD-2019-37190)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the way unistore.dll handles memory...

CVE-2019-0352: Exposure of Sensitive Information to an Unauthorized Actor

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...

VulnCheck KEV: CVE-2019-1214

Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...

Security update for apache-commons-beanutils (important)

openSUSE Security Update: Security update for apache-commons-beanutils Announcement ID: openSUSE-SU-2019:2058-1 Rating: important References: 1146657 Cross-References: CVE-2019-10086 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available...

MSXML Code Execution

The vulnerability of Microsoft XML MSXML operating system-based systems lies in errors related to restricting XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created web page from a remote location...

Prototype Pollution

mithrill is vulnerable to prototype pollution. A lack of validation when parsing query strings allow an attacker to inject arbitrary objects and execute arbitrary code...

Microsoft Graphics Component Information Leakage Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2019-31063)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An information disclosure vulnerabili...

SUSE-SU-2019:1476-1 Security update for sssd

This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation bsc1124194. Non-security issues fixed: - Allow defaults sudoRole without sudoUser attribute bsc1135247 - Missing GPOs director...

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38619)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38620)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

CVE-2019-10086

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean...

CVE-2019-10086

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean...

CVE-2019-14430

plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection...

PT-2019-5824

Name of the Vulnerable Software and Affected Versions YouPHPTube versions 7.2 and earlier Description The issue is related to a lack of protection against SQL query structure exploitation in the plugin/Audit/Objects/AuditTable.php component of YouPHPTube. This allows a remote attacker to execute...