2973 matches found
MiniUPnP MiniSSDPd Resource Management Error Vulnerability
MiniSSDPd is a daemon for managing SSDPs on Posix systems. A resource management error vulnerability exists in the 'updateDevice' function of the minissdpd.c file in MiniUPnP MiniSSDPd versions 1.4 and 1.5. The vulnerability stems from the mismanagement of system resources e.g., memory, disk spac...
New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches
Facebook has a lot of problems, then there are a lot of problems for Facebook—and both are not going to end anytime sooner. Though Facebook has already set aside $5 billion from its revenue to cover a possible fine the company is expecting as a result of an FTC investigation over privacy...
UBUNTU-CVE-2018-18512
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...
Forcepoint Email Security Buffer Overflow Vulnerability
Forcepoint Email Security is a suite of email protection solutions from US-based Forcepoint. The product includes features such as spam filtering, malware detection, phishing protection, and protection against intrusion BEC attacks. A stack-based buffer overflow vulnerability exists in Forcepoint...
PT-2019-9318 · Forcepoint · Forcepoint Email Security
Name of the Vulnerable Software and Affected Versions: Forcepoint Email Security version 8.5 Description: A stack-based buffer overflow allows an attacker to craft malicious input, potentially crashing a process and creating a denial-of-service. Although no known Remote Code Execution RCE...
CVE-2019-4080
IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...
Forcepoint Email Security Password Reset Vulnerability
Forcepoint Email Security is a suite of email protection solutions from US-based Forcepoint. The product includes features such as spam filtering, malware detection, phishing protection, and protection against intrusion BEC attacks. A security vulnerability exists in version 8.5.x of Forcepoint...
Micro Focus Solutions Business Manager Code Injection Vulnerability
Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A security...
Micro Focus Solutions Business Manager Cross-Site Scripting Vulnerability (CNVD-2019-12127)
Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...
PT-2019-19408 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.5.11 Description: A cross-site scripting XSS issue allows attackers to inject arbitrary web script or HTML via the xiwindow parameter. This could potentially lead to unauthorized actions on the affected system...
CVE-2018-19641
Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...
CVE-2018-19642
Denial of service issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...
CVE-2018-15815
FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file...
CVE-2019-8351
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...
KinagaCMS Cross-Site Scripting Vulnerability
KinagaCMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in KinagaCMS versions prior to 6.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
RSA Archer Information Disclosure Vulnerability
Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in Dell EMC RSA Archer...
IBM BigFix Platform Unauthorized Access Vulnerability
IBM BigFix Platform is a dynamic, content-driven messaging and management system from IBM, USA. An unauthorized access vulnerability exists in BigFix Platform versions 9.5 through 9.5.11 and 9.2 through 9.2.16, which could be exploited by an attacker to obtain information...
PT-2019-19299 · Signiant · Signiant Manager+Agents
Name of the Vulnerable Software and Affected Versions: Signiant Manager+Agents versions prior to 13.5 Description: The issue is related to a Buffer Overflow in the implementation of the set command. Recommendations: For versions prior to 13.5, update to version 13.5 or later to resolve the issue...