PT-2019-14149

Name of the Vulnerable Software and Affected Versions Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.factorymode tha...

PT-2019-14114

Name of the Vulnerable Software and Affected Versions Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604 sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.wfo.impl that allo...

PT-2019-14105

Name of the Vulnerable Software and Affected Versions Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA Ray 530/ELUGA Ray 530:8.1.0/O11019/1531828974:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.wfo.impl...

PT-2019-14109

Name of the Vulnerable Software and Affected Versions Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/Photo Pro:8.1.0/O11019/1528117003:user/release-keys com.mediatek.wfo.impl app version 8.1.0 Description The issue concerns a pre-installed app on the Fly Photo Pro Android...

PT-2019-14090

Name of the Vulnerable Software and Affected Versions Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605 sprout:8.1.0/O11019/CE-180914V59:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.wfo.impl that allows...

PT-2019-14101

Name of the Vulnerable Software and Affected Versions Hisense F17 Android device with a build fingerprint of Hisense/F17 4G/HS6739MT:8.1.0/O11019/Hisense F17 4G 00 S01:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.wfo.impl that allows any...

CVE-2019-15369: Undefined Security Weakness

The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61Turbo/Z61Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-15358: Undefined Security Weakness

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15352: Undefined Security Weakness

The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...

WordPress YIT Plugin Framework Unauthorized Modification Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.YIT Plugin Framework is one of the YIT plugin frameworks used in it. A security vulnerability exists in the...

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

Information disclosure

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

PT-2019-15534

Name of the Vulnerable Software and Affected Versions Cezerin version 0.33.0 Description The issue allows unauthorized modification of order information because internal attributes can be overwritten via conflicting names when processing order requests. A malicious customer can manipulate an orde...

Design/Logic Flaw

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Design/Logic Flaw

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server...

CVE-2019-14838

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server...

F5 Networks BIG-IP : Martian address filtering vulnerability (K45644893)

The BIG-IP system fails to perform martian address filtering as defined in RFC 1812, section 5.3.7 for control plane tasks on the management interface. This may allow attackers on an adjacent system to force the BIG-IP system into processing packets with spoofed source addresses. CVE-2019-6654 No...

F5 Networks BIG-IP : BIG-IP ASM vulnerability (K04280042)

F5 BIG-IP ASM may expose sensitive information and allow the system configuration to be modified when using non-default settings. CVE-2019-6650 Impact The vulnerability is only present on multi-bladed systems VIPRION with BIG-IP ASM provisioned, on the following interfaces : Management interface ...