cPanel Authorization Issues Vulnerability (CNVD-2019-28997)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability to bypass the...

CVE-2019-5397

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A password recovery vulnerability exists in the Web portal of Cisco Enterpri...

qt5-qtbase: Double free in QXmlStreamReader

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

MicroStrategy Web Cross-Site Scripting Vulnerability (CNVD-2019-23751)

Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A cross-site scripting vulnerability exists in the 'FLTB' parameter in MicroStrategy Web versions prior to 10.1 patch 10. The...

Rapid7's Windows InsightIDR Local Elevation of Privilege Vulnerability

Rapid7 Insight Agent is a lightweight software from Rapid7 USA. The software is capable of collecting data from IT assets. A security vulnerability exists in Rapid7 Insight Agent 2.6.3 and earlier versions. An attacker can exploit the vulnerability to elevate privileges to SYSTEM...

PT-2019-12174

Name of the Vulnerable Software and Affected Versions InfinitumIT DirectAdmin versions prior to v1.561 Description The issue concerns the FileManager in InfinitumIT DirectAdmin, where an attacker can exploit XSS via CMD FILE MANAGER, CMD SHOW USER, and CMD SHOW RESELLER. This allows the attacker ...

Linux kernel local elevation of privilege vulnerability (CNVD-2019-06183)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An out-of-bounds read/write vulnerability exists in Linux kernel versions prior to 4.20.12. The vulnerability stems...

Google Chrome ServiceWorker Policy Enforcement Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. ServiceWorker is one of the background messaging components. A security vulnerability exists in ServiceWorker in versions of Google Chrome prior to 72.0.3626.81, which stems from the program failing to adequately...

UBUNTU-CVE-2019-6798

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...

CVE-2018-16087

Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Unspecified Vulnerability in Apple iOS and Safari

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in the Safari component of Apple iOS...

PT-2018-14530 · Libmspack +1 · Libmspack +1

Name of the Vulnerable Software and Affected Versions: libmspack versions prior to 0.8alpha Description: The issue arises from the chmextract.c sample program distributed with libmspack, which fails to protect against absolute or relative pathnames in CHM files. This leads to a Directory Traversa...

Cisco SD-WAN Solution Command Injection Vulnerability

Cisco vEdge 100 Series Routers is a 100 series router product. vManage Network Management System is a network management system. SD-WAN Solution is a network extension solution that runs on it. A command injection vulnerability exists in the command-line interface CLI in Cisco SD-WAN Solution...

Google Chrome Security Bypass Vulnerability (CNVD-2018-22396)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to bypass site quarantine restrictions after tab recovery...

UBUNTU-CVE-2018-12027

An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, if any of the parent directories of sa...

PT-2018-2076 · D Link · D-Link Central Wifi Manager

Name of the Vulnerable Software and Affected Versions: D-Link Central WiFi Manager versions prior to 1.03r0100-Beta1 Description: The issue is related to the use of hardcoded credentials for the FTP service, which runs on port 9000. This allows a remote attacker to execute arbitrary PHP code by...

CVE-2018-11168

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...

WinShot Untrustworthy Search Path Vulnerability

WinShot is a screenshot tool based on the Windows platform. An untrustworthy search path vulnerability exists in WinShot 1.53a and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...

ALPINE-CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...