Samsung Galaxy Apps Trust Management Issue Vulnerability

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. A security vulnerability exists in Samsung Galaxy Apps versions prior to 4.4.01.7. An attacker can exploit the vulnerability to modify the hostname to mimic the app store's API,...

Intel Unite Client Elevation of Privilege Vulnerability

Intel UniteR Client is a conferencing client from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 4.0. An attacker could exploit the vulnerability to elevate privileges...

CVE-2019-0287

Under certain conditions SAP BusinessObjects Business Intelligence platform Central Management Server, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...

CVE-2018-12299

Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names...

Aiwo Real Estate System v4.7 Information Disclosure Vulnerability

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. AiWo Real Estate System v4.7 has information leakage vulnerability, attackers can use the vulnerability to obtain database information...

Aiwo Real Estate System v4.7 has Arbitrary File Download Vulnerability

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Code execution vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to execute arbitrary code and obtain server information...

Directory Traversal Vulnerability in Aiwo Real Estate System v4.7

Intimate Cat imcat is an extremely light, minimalist general-purpose PHP website system. Directory traversal vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to obtain directory files and other information...

File Upload Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. File upload vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to upload malicious code and gain server privileges...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has a code execution vulnerability that can be exploited by attackers to execute arbitrary code and obtain server information...

CVE-2018-17169

An XML external entity XXE vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

PT-2019-12314

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the notes parameter in the "notes.php" endpoint. Recommendations For I, Librarian versio...

Linux Kernel Information Disclosure Vulnerability (CNVD-2019-13411)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in Linux kernel versions 4.20.5 and earlier, which arises from errors such as configuration during operation of a...

PT-2019-12307

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the export files parameter in the "export.php" API endpoint. Recommendations For I,...

Suricata Out-of-Bounds Read Vulnerability

Suricata is a high-performance network intrusion detection IDS, intrusion prevention IPS and network security monitoring multi-threaded engine. An out-of-bounds read vulnerability exists in Suricata 4.0.4. The vulnerability stems from an integer overflow in DecodeENIPPDU in app-layer-enip-commmon...

PT-2019-8748 · Open Information Security Foundation · Suricata

Name of the Vulnerable Software and Affected Versions: Suricata version 4.0.4 Description: The issue arises from incorrect handling of the SSH banner parsing in Suricata. A malformed SSH banner can cause the parsing code to read beyond the allocated data due to the lack of a length check in the...

DEBIAN-CVE-2019-5421

Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The Devise::Models::Lockable class, more specifically at the incrementfailedattempts method. File location: lib/devise/models/lockable.rb that can result in Multiple concurrent requests c...

Sitemagic CMS Cross-Site Scripting Vulnerability

Sitemagic CMS is a scalable content management system CMS. A cross-site scripting vulnerability exists in the SMFiles/FrmUpload.class.php file in Sitemagic CMS v4.4, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'filename' parameter...

CleanMyMac X Elevation of Privilege Vulnerability

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform from MacPaw USA. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in CleanMyMac X version 4.20, which stems from the program's inability to...

UBUNTU-CVE-2019-9878

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by for example sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation...