PT-2019-3587

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 and 8.57 Description The issue is related to inadequate access control in the Integration Broker component of PeopleSoft Enterprise PeopleTools, allowing a low-privileged attacker with network...

PT-2019-3808

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, 13 Java SE Embedded version 8u221 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded, resulting in unauthorized...

PT-2019-3778

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to the Web Services component of Oracle WebLogic Server, which is part of Oracle Fusion Middleware. It allows a low-privileged attacker with...

PT-2019-3674

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.4 and 13 Description The issue is caused by a buffer overflow in the Hotspot component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

PT-2019-3708

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Human Resources version 9.2 Description The issue is related to inadequate access control in the US Federal Specific component of the PeopleSoft Enterprise HCM Human Resources product. This can be exploited by a remot...

CVE-2019-0073

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D18...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-36927)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.53 suffers from a user-mode write access conflict vulnerability. An attacker can exploit this vulnerability to read...

CVE-2019-17260

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpchc!memcpy+0x000000000000004e...

CVE-2019-17260

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpchc!memcpy+0x000000000000004e...

Code injection

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpchc!memcpy+0x000000000000004e...

CVE-2019-17260

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpchc!memcpy+0x000000000000004e...

CVE-2019-17260

CVE-2019-17260 affects MPC-HC up to version 1.7.13. The issue is a Read Access Violation in a Block Data Move starting at mpc_hc!memcpy+0x4e. The available documents confirm the vulnerability, but do not provide exploit details or a confirmed impact vector beyond the read/write concerns implied b...

PT-2019-15047

Name of the Vulnerable Software and Affected Versions MPC-HC versions prior to 1.7.14 Description The issue allows a Read Access Violation on a Block Data Move starting at memcpy+0x000000000000004e. Recommendations For versions prior to 1.7.14, update to version 1.7.14 or later to resolve the iss...

CVE-2019-17260: Out-of-bounds Read

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpchc!memcpy+0x000000000000004e...

Vulnerability of the Server component: The MySQL Server database management system’s DDL functions allow attackers to gain read access to data.

The vulnerability of the Server component: The DDL system for managing MySQL database servers has a vulnerability related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and read data...

CVE-2019-10409

A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates...

PT-2019-11815 · Jenkins · Jenkins Azure Event Grid Build Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Azure Event Grid Build Notifier Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master or controller. Specifically, the...

azure-event-grid-notifier stores credentials in plain text

azure-event-grid-notifier stores the Azure Event Grid secret key unencrypted in job config.xml files on the Jenkins controller. This key can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. As of publication of this advisory, there is no fix...

CVE-2019-13528

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 JACE 3e, JACE 6e, JACE 7, JACE-8000, Niagara 4.4u3 JACE 3e, JACE 6e, JACE 7, JACE-8000, and Niagara 4.7u1 JACE-8000, Edge 10...

Code injection

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 JACE 3e, JACE 6e, JACE 7, JACE-8000, Niagara 4.4u3 JACE 3e, JACE 6e, JACE 7, JACE-8000, and Niagara 4.7u1 JACE-8000, Edge 10...