MantisBT < 2.21.2 XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

PT-2019-7058

Name of the Vulnerable Software and Affected Versions feature-comments plugin versions prior to 1.2.5 for WordPress Description The issue concerns a CSRF problem that affects the featuring or burying of comments. Recommendations For versions prior to 1.2.5, update to version 1.2.5 or later to...

CVE-2019-11601

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location...

mysql: Client programs unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached ...

PT-2019-7679

Name of the Vulnerable Software and Affected Versions simple-add-pages-or-posts plugin versions prior to 1.7 Description The issue concerns a CSRF problem that allows for the deletion of users. Recommendations For versions prior to 1.7, update to version 1.7 or later to resolve the issue...

CVE-2016-10883: Cross-Site Request Forgery (CSRF)

The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users...

Fedora Update for kernel FEDORA-2019-6bda4c81f4

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

NewStart CGSL MAIN 4.06 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0090)

The remote NewStart CGSL host, running version MAIN 4.06, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and...

Cisco Webex Network Recording Player and Cisco Webex Player Buffer Overflow Vulnerability (CNVD-2020-16484)

Cisco WebEx Network Recording Player is an application for playing back WebEx meeting recordings recorded on the computers of online meeting participants.Cisco Webex Player is Cisco's player for playing back video meeting recordings. A buffer overflow vulnerability exists in Cisco Webex Network...

CVE-2019-1929

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced...

Fedora Update for java-11-openjdk FEDORA-2019-56a658c60c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AVM FRITZ!WLAN Repeater Detection (UPnP)

UPnP based detection of AVM FRITZ!WLAN Repeater devices. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AVM FRITZ!WLAN Repeater / FRITZ!OS Detection Consolidation

Consolidation of AVM FRITZ!WLAN Repeater and FRITZ!OS detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2019-2802

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

PT-2019-16493

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 11.4 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. It requires human interaction from a person other than the...

Oracle MySQL Server 5.7 <= 5.7.23 Security Update (cpujul2019) - Windows

Oracle MySQL Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2019-3571: Improper Encoding or Escaping of Output

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension...

PT-2019-16521 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

PT-2019-16510 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

CVE-2019-13488: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...