PT-2019-10204

Name of the Vulnerable Software and Affected Versions: MODX Revolution versions prior to v2.8.0, specifically versions through v2.7.0-pl Description: The issue allows for XSS attacks via a document resource, such as pagetitle, which is mishandled during certain actions like Update, Quick Edit, or...

CVE-2018-20756: Improper Neutralization of Input During Web Page Generation

MODX Revolution through v2.7.0-pl allows XSS via a document resource such as pagetitle, which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs...

Qualys Cloud Platform (VM, PC) 8.16 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.16, contains several new improvements in Qualys Vulnerability Management and Qualys Policy Compliance, which includes new password security option, increased limit for virtual hosts that can be added to a subscription, added support...

EMC RSA Authentication Manager < 8.4 Relative Path Traversal (DSA-2018-226)

The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4. It is, therefore, affected by a relative path traversal vulnerability in the Quick Setup component. An attacker could provide an administrator with a maliciously crafted license file to be used during the...

CVE-2018-15782

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

Path traversal

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

CVE-2018-15782

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

CVE-2018-15782

The CVE-2018-15782 entry affects EMC RSA Authentication Manager prior to version 8.4, where the Quick Setup component is vulnerable to a relative path traversal. A local attacker could use a crafted license during initial quick setup to obtain unauthorized access to the system. Data from the init...

CVE-2018-15782 DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

PT-2019-9178

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager versions prior to 8.4 Description The issue concerns a relative path traversal vulnerability in the Quick Setup component. This could allow a local attacker to provide a crafted license, potentially granting...

CVE-2018-15782: Improper Limitation of a Pathname to a Restricted Directory

The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup deployment of the initial RSA Authenticati...

Denial Of Service (DoS)

qemu-kvm-rhev is vulnerable to denial of service DoS attacks. The vulnerability exists as the addressspacewritecontinue function in exec.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds access and guest instance crash by leveraging use...

Description of the security update for SharePoint Enterprise Server 2016: January 8, 2019

None None...

Foxit Quick PDF Library Out-of-Bounds Memory Access Vulnerability

Foxit Quick PDF Library is China's Foxit Foxit Software Corporation, a PDF SDK Software Development Kit. The product is mainly used to create, render and edit PDF documents. An out-of-bounds memory access vulnerability exists in Foxit Quick PDF Library. An attacker could cause an access conflict ...

CVE-2018-20249

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access...

CVE-2018-20247

Foxit Quick PDF Library (pre-16.12) is affected by a stack overflow when loading a malformed PDF with a recursive page tree structure via LoadFromFile, LoadFromString, or LoadFromStream. The issue stems from handling of recursive page trees and can lead to a stack overflow. CNVD reports the vulne...

CVE-2018-20249

The affected component is Foxit Quick PDF Library (all versions prior to 16.12). The vulnerability arises when loading a malformed or malicious PDF containing invalid xref entries via DAOpenFile or DAOpenFileReadOnly, causing an access violation due to out-of-bounds memory access. This is documen...

CVE-2018-20248

Foxit Quick PDF Library (prior to version 16.12) is affected by CVE-2018-20248, where loading a malformed or malicious PDF containing invalid xref table pointers or data via LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly can cause an access violation due to out-of...

CVE-2018-20248

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access...

CVE-2018-20247

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow...