CVE-2019-9713

An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...

PT-2019-19816

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.4 Description An issue was discovered that allows unauthorized access due to the lack of ACL checks in the sample data plugins. Recommendations For versions prior to 3.9.4, update to version 3.9.4 or later to...

PT-2019-1746

Name of the Vulnerable Software and Affected Versions Intel Platform Sample/Silicon Reference firmware for 8th Generation Intel Core Processor Intel Platform Sample/Silicon Reference firmware for 7th Generation Intel Core Processor Description The issue is related to a privilege escalation...

PT-2019-1745

Name of the Vulnerable Software and Affected Versions Intel Core versions 7th Generation through 8th Generation Intel Pentium versions J5005 through Silver J5005 Intel Pentium versions N5000 Intel Celeron versions J4005 through J4105 Intel Celeron versions N4000 through N4100 Description The issu...

PT-2019-2091

Name of the Vulnerable Software and Affected Versions Intel Core Processor affected versions not specified Description The issue is related to a denial of service vulnerability in the Platform Sample/Silicon Reference firmware for Intel Core Processors, which may allow a privileged user to...

PT-2019-1665

Name of the Vulnerable Software and Affected Versions IntelR Server Board, IntelR Server System and IntelR Compute Module affected versions not specified Description The issue is related to inadequate access control and improper memory initialization in the Platform Sample/Silicon Reference...

CVE-2019-9713: Missing Authorization

An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...

PT-2019-1662

Name of the Vulnerable Software and Affected Versions Intel Core Processor Platform Sample/Silicon Reference firmware for 8th Generation Intel Core Processor Intel Core Processor Platform Sample/Silicon Reference firmware for 7th Generation Intel Core Processor Description The issue is related to...

[20190304] - Core - Missing ACL check in sample data plugins

The sample data plugins lack ACL checks, allowing unauthorized access...

Drupal 8.6.9 - REST Module Remote Code Execution

Drupal 8.6.9 - REST Module Remote Code Execution !/usr/bin/env python3 CVE-2019-6340 Drupal = 8.6.9 REST services RCE PoC 2019 @leonjza Technical details for this exploit is available at: https://www.drupal.org/sa-core-2019-003 https://www.ambionics.io/blog/drupal8-rce...

TAU Threat Intelligence Notification: New macOS Malware Variant of Shlayer (OSX) Discovered

Carbon Black’s Threat Analysis Unit TAU recently discovered a new variant of a family of macOS malware which was first discovered in February of 2018 by researchers from Intego. TAU has obtained new samples of this malware and observed downloads of the malware from multiple sites, primarily...

CVE-2018-11855: Integer Overflow or Wraparound

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...

PT-2019-8812

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM630, SDM660 Description The issue arises when an end user utilizes the SCP11 sample OCE cod...

Webmin 1.890 Cross Site Scripting

Vulnerability type: Reflected Cross Site Scripting Vendor: http://www.webmin.com/index.html Product: Webmin Affected version: 1.890 Credit: Foo Jong Meng CVE ID: CVE- 2018-19191 DESCRIPTION: After logging into the webmin interface, attack can be launched by injecting the XSS payload at the affect...

PT-2023-3406

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2 Description The issue is related to a NULL Pointer Dereference in the gpac library, specifically in the gf isom fragment add sample ex function located in isomedia/movie fragments.c. This could allow a remote...

PT-2022-18247 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is a stack-overflow vulnerability in the gf isom get sample for movie time function of mp4box. Recommendations: For GPAC mp4box version...

Bento4 Excessive Memory Allocation Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. Bento4 1.5.1-627 suffers from an excessive memory allocation vulnerability that can be exploited by an attacker to trigger an attempt at excessive memory allocation via AP4Sample::ReadData in Core/Ap4Sample.cpp...

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

PT-2018-15287

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered that allows attackers to trigger an attempted excessive memory allocation. This is related to the AP4 DataBuffer::SetDataSize and AP4 DataBuffer::ReallocateBuffer functions in...

DEBIAN-CVE-2018-19840

The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource exhaustion caused by an infinite loop via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero...