PT-2019-3170 · Cisco · Cisco Firepower Services Software For Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense Software affected versions not specified Cisco FirePOWER Services Software for ASA affected versions not specified Cisco Firepower Management Center Software affected versions not specified Description: The issu...

PT-2019-4671

Name of the Vulnerable Software and Affected Versions SQLite versions 3.29.0 and earlier Description The issue is related to a division by zero error in the query planner, specifically in the whereLoopAddBtreeIndex function. This error can cause a browser or other application to crash. The proble...

CVE-2019-1183

This information is being revised to indicate that this CVE CVE-2019-1183 is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194. No update is required...

Ruby on Rails Query Manipulation Vulnerability (Feb 2013)

Ruby on Rails is prone to a query manipulation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rubyonrails:rails";...

PT-2019-17776 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD versions prior to 12.0-RELEASE-p8 FreeBSD versions prior to 11.3-RELEASE-p1 FreeBSD versions prior to 11.2-RELEASE-p12 Description: The issue allows a malicious local user to gain root privileges or escape from a jail by causing the...

WordPress FV Flowplayer Video Player Plugin < 7.3.19.727 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112608";...

PT-2019-10015 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2 through 7.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2019-16501 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a hang o...

WordPress Online Lesson Booking Plugin < 0.8.7 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

PT-2019-6001 · Proclima · Proclima

Name of the Vulnerable Software and Affected Versions: ProClima versions prior to 8.0.0 Description: A vulnerability exists in the software that could allow a malicious DLL file, with the same name as any resident DLLs inside the software installation, to execute arbitrary code. This issue is...

GetSimple CMS < 3.3.16 Multiple Vulnerabilities

GetSimple CMS is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-17917 · Unknown · Html5 Maps

Name of the Vulnerable Software and Affected Versions: HTML5 Maps versions 1.6.5.6 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations: For versions 1.6.5.6 and earlier,...

PT-2019-16899 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive...

PT-2019-18511 · Prima Systems · Flexair

Name of the Vulnerable Software and Affected Versions: Prima Systems FlexAir versions 2.3.38 and prior Description: The issue allows an unauthenticated user to send unverified HTTP requests. This may enable an attacker to perform certain actions with administrative privileges if a logged-in user...

PT-2019-13134 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 versions 0.27.1 and earlier Description: The issue is related to an integer overflow in the WebPImage::decodeChunks function, which can be triggered by a crafted WEBP image file. This can cause a denial of service due to a large heap...

Arbitrary Code Injection in mobile-icon-resizer

mobile-icon-resizer resizes large images for use as icons for iOS and Android. mobile-icon-resizer has a code execution vulnerability in versions before 0.4.3. mobile-icon-resizer takes an options object as an argument to define the resulting icons as such: var options = config: './config.js'...

PT-2019-2562 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 9.7 through 11.1 Description: The issue is related to a buffer overflow in the database management system, which could allow an authenticated local attacker to execute arbitrary code on the system with root privileges...

PT-2019-16916 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue allows authenticated users to impersonate other users, potentially leading to unauthorized access. Recommendations: For versions 9.0.1 through 9.0.6, update to a...

PT-2019-16925 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue could reveal highly sensitive information in specialized conditions to a local user, which could be used in further attacks against the system. Recommendations: F...

PT-2019-9991 · Ibm · Ibm Api Connect

Name of the Vulnerable Software and Affected Versions: IBM API Connect versions 2018.1 through 2018.4.1.5 Description: The issue allows an attacker to obtain sensitive information from a specially crafted HTTP request, which could aid in further attacks against the system. Recommendations: For...