MySQL 8.0.x < 8.0.18 Multiple Vulnerabilities (Oct 2019 CPU)

The version of MySQL running on the remote host is 8.0.x prior to 8.0.18. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the October 2019 Critical Patch Update advisory: - Vulnerability in the MySQL Server product of Oracle...

Local Privilege Escalation in GlobalProtect App for Linux and Mac OS

A Local Privilege Escalation vulnerability exists in GlobalProtect App for Linux and Mac OSX that can allow non-root users to overwrite root files on the file system. Ref GPC-8945, CVE-2019-17436 Successful exploitation of this issue may allow a low-privileged local user to escalate their...

Local Privilege Escalation in GlobalProtect App for Linux and Mac OS

A Local Privilege Escalation vulnerability exists in GlobalProtect App for Linux and Mac OSX that can allow non-root users to overwrite root files on the file system. Ref GPC-8945, CVE-2019-17436 Successful exploitation of this issue may allow a low-privileged local user to escalate their...

Information Disclosure

github.com/openshift/library-go is vulnerable to information disclosure. Unsanitized secret data is written to the pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been...

Information Disclosure

github.com/openshift/library-go is vulnerable to information disclosure. Unsanitized secret data is written to the static pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already...

Adobe Experience Manager Forms CVE-2019-8089 Cross Site Scripting Vulnerability

Description Adobe Experience Manager Forms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit...

CVE-2019-3767

Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially...

Information disclosure

Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially...

CVE-2019-3767

Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially...

CVE-2019-14569

Pointer corruption in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-14570

Memory corruption in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-14569

Pointer corruption in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2017-7980

An out-of-bounds r/w access issue was found in QEMU's Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2613-1)

This update for the Linux Kernel 3.12.74-6064107 fixes one issue. The following security issue was fixed : CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest...

SUSE-SU-2019:2601-1 Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92120 fixes several issues. The following security issues were fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged...

SUSE-SU-2019:2572-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged gue...

McAfee Endpoint Security CVE-2019-3653 Unauthorized Access Vulnerability

Description McAfee Endpoint Security is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. McAfee Endpoint Security ENS versions prior to 10.6.1 October 2019 Update are...

CVE-2019-3745

The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prior to 2.4.0. This issue is exploitable only during the installation of the product by an administrator. A local authenticated low privilege...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

Cross site scripting

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers...