PT-2019-5212 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to incorrect URL sanitization in the wp kses bad protocol once function, which can lead to cross-site scripting XSS attacks. This could allow a remote attacker to compromise...

Linux kernel null pointer dereference vulnerability (CNVD-2019-31655)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c in versions of Linux kernel prior to 5.0.11. The...

Linux kernel resource management error vulnerability (CNVD-2019-32356)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the sound subsystem in versions of Linux kernel prior to 5.0.10. The vulnerability arises from mismanagement of...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

PT-2019-7256 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.6 Description: The issue concerns a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

HPE 3PAR Service Processor Override Access Vulnerability

HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from HPE, USA. An over-the-horizon access vulnerability exists in HPE 3PAR Service Processor versions prior to 5.0.5.1. An attacker could exploit this vulnerability to gain authorized...

mysql: C API unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

Command Execution Vulnerability in DedeCMS V5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS V5.7, which can be exploited by an attacker to gain server privileges...

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

Apple watchOS Messages has an unspecified vulnerability

Apple watchOS is an operating system for smartwatches from Apple Inc. Messages is an application component for sending text, photos and videos. A security vulnerability exists in the Messages component in Apple watchOS versions prior to 5.3. After being removed from an iMessage call, an attacker...

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24211)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

ALPINE-CVE-2019-2737

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

UBUNTU-CVE-2019-2739

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...

Oracle Database Server Application Express Component Access Control Error Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Cohesity DataPlatform Man-in-the-Middle Vulnerability

Cohesity DataPlatform is a suite of platforms from Cohesity for managing ancillary data and applications. The platform is primarily used for data backup, instant recovery, etc. A security vulnerability exists in Cohesity DataPlatform version 5.x and version 6.x prior to 6.1.1c, which stems from t...

DEBIAN-CVE-2019-1010315

WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig dsdiff.c:282. The attack vector is: Maliciously crafted .wav file. The fixed...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

Command Execution Vulnerability in DedeCMS v5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS v5.7, which can be exploited by an attacker to gain server privileges...

SuperMicro SuperDoctor Arbitrary Code Execution Vulnerability

SuperMicro SuperDoctor is a set of server management monitoring platform from SuperMicro, Inc. in the United States. The platform is mainly used for real-time monitoring of the target node hardware in the data center system operation status or availability. A security vulnerability exists in Supe...