IBM Security Privileged Identity Manager Path Traversal Vulnerability

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...

IBM Security Privileged Identity Manager Authorization Issues Vulnerability

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...

VulnCheck KEV: CVE-2019-0633

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630...

HYBBS Cross-Site Request Forgery Vulnerability

HYBBS is a lightweight community forum program. A cross-site request forgery vulnerability exists in the /?admin/user.html page in HYBBS version 2.2, which originates from a WEB application that does not adequately validate whether a request is from a trusted user. An attacker could exploit this...

Cisco ASR 900 Cisco IOS XE Input Validation Vulnerability

The Cisco ASR 900 is a 900-series aggregation services router from Cisco, Inc.Cisco IOS XE is an operating system developed for Cisco network devices. An input validation vulnerability exists in Cisco IOS XE in the Cisco ASR 900 Route Switch Processor 3 that stems from the program's failure to...

Verifone Verix Multi-app Conductor Buffer Overflow Vulnerability

Verifone Verix Multi-app Conductor is a tool from Verifone USA that supports terminal access to multiple Verifone applications. A buffer overflow vulnerability exists in Verifone Verix Multi-app Conductor version 2.7. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2019-15165 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 affected versions not specified Description: A vulnerability in the ingress traffic validation could allow an unauthenticated, adjacent attacker...

UBUNTU-CVE-2019-3826

A stored, DOM based, cross-site scripting XSS flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts...

OPENSUSE-SU-2019:0009-1 Security update for singularity

This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Fixed a local root exploit, related to joining arbitrary mount namespaces boo1111411...

CVE-2019-7434

PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory...

Free MP3 CD Ripper Buffer Overflow Vulnerability (CNVD-2019-07811)

Free MP3 CD Ripper is an audio format converter. A buffer overflow vulnerability exists in Free MP3 CD Ripper version 2.6. A remote attacker can exploit this vulnerability to execute arbitrary code via specially crafted .wma files...

File Upload Vulnerability in MyfCMS v2.0

MyfCMS is a PHP+Mysql content management system. A file upload vulnerability exists in MyfCMS v2.0, which can be exploited by attackers to upload a webshell and gain server privileges...

haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash

A flaw was found in HAProxy, versions before 1.8.17 and 1.9.1. Mishandling occurs when a priority flag is set on too short HEADERS frame in the HTTP/2 decoder, allowing an out-of-bounds read and a subsequent crash to occur. A remote attacker can exploit this flaw to cause a denial of service. Tho...

Python Information Disclosure Vulnerability (CNVD-2019-07926)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python versions 2.7.x through 2.7.16 and 3.x through 3.7.2. The...

PT-2019-16739 · Prometheus +1 · Prometheus +1

Name of the Vulnerable Software and Affected Versions: Prometheus versions prior to 2.7.1 Description: A stored, DOM based, cross-site scripting XSS flaw was found. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the...

CICMS V2.1 18013 has xss vulnerability

CICMS system is developed by php+mysql, based on CodeIgniter, and is mainly used for enterprise building. CICMS V2.1 18013 has an xss vulnerability, which can be exploited by attackers to execute arbitrary JavaScript code...

pfSense Access Restriction Bypass Vulnerability (CNVD-2019-08722)

pfSense is a set of network firewalls based on FreeBSD Linux. A security signature issue vulnerability exists in pfSense version 2.4.41. A remote attacker can exploit this vulnerability to bypass access restrictions...

GNU C Library Stack Buffer Overflow Vulnerability

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A stack buffer overflow vulnerability exists in the checkdstlimitscalcpos1 of the posix/regexec.c file in GNU C Library version 2.29 and earlier. No details of the vulnerability are provided at this...

OPENSUSE-SU-2019:0244-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - Update to 2.8 - Added target parameter to urlize function. - Added support for followsymlinks to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed cache...

GNU Binutils Buffer Overflow Vulnerability (CNVD-2019-05784)

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...