Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1166)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-6030

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CC versions before 20.0.8 Adobe Photoshop CC versions 21.0.x before 21.0.2 Description The issue is related to a memory corruption vulnerability, specifically a buffer overflow in memory, which could allow a remote attacker to...

CVE-2019-17326: Undefined Security Weakness

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted parameter. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page...

PT-2019-4717

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2019.012.20040 and earlier Adobe Acrobat and Reader versions 2017.011.30148 and earlier Adobe Acrobat and Reader versions 2015.006.30503 and earlier Description The issue is related to a use-after-free...

Cisco Firepower Management Center SQL Injection

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Debian DLA-1896-1 : commons-beanutils security update

It was discovered that there was a remote arbitrary code vulnerability in commons-beanutils, a set of utilities for manipulating JavaBeans code. For Debian 8 'Jessie', this issue has been fixed in commons-beanutils version 1.9.2-1+deb8u1. We recommend that you upgrade your commons-beanutils...

PT-2019-5954

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CC versions 19.1.8 and earlier Adobe Photoshop CC version 20.0.5 and earlier Description The issue is related to a type confusion error in the graphic editor. Successful exploitation could lead to arbitrary code execution,...

PT-2019-5962

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.012.20035 Adobe Acrobat Reader versions prior to 2019.012.20035 Adobe Acrobat versions prior to 2017.011.30142 Adobe Acrobat Reader versions prior to 2017.011.30143 Adobe Acrobat versions prior to...

CVE-2019-5395

HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...

CVE-2019-5395: Unrestricted Upload of File with Dangerous Type

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Node.js third-party modules: Lack of input validation and sanitization in react-autolinker-wrapper library causes XSS

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report XSS in...

PT-2019-3403

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2019.010.20100 and earlier Adobe Acrobat and Reader versions 2017.011.30140 and earlier Adobe Acrobat and Reader versions 2015.006.30495 and earlier Description The issue is related to a heap overflow...

CVE-2019-3476: Undefined Security Weakness

Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...

CVE-2019-6139

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

CVE-2019-6139: Unrestricted Upload of File with Dangerous Type

Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...

devolo dLAN 550 duo+ Starter Kit Remote Code Execution

Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for any location without structured network wiring. Especially in buildings or residences lacking network cables or where updating the wiring would be expensive and...

CVE-2018-18589

CVE-2018-18589 concerns Micro Focus Real User Monitoring software with vulnerable versions: 9.26IP, 9.30, 9.40 and 9.50. Connected CVE data notes a Java deserialization vulnerability as the root cause, enabling potential remote arbitrary code execution. The CVE entry indicates the impact is remot...

PT-2018-1684

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2018.011.20063 and earlier Adobe Acrobat and Reader versions 2017.011.30102 and earlier Adobe Acrobat and Reader versions 2015.006.30452 and earlier Description The issue is related to an out-of-bounds write...

Watchguard wireless access points File Loading Restriction Command Execution

The vulnerability of the microprogrammed software of Watchguard wireless access points relates to insufficient restrictions on file downloads. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

CVE-2018-7102: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...