Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability (CNVD-2019-24770)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An arbitrary code execution vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability stems from an improper design or implementation during code development of a network...

PT-2019-2638 · Jenkins · Jenkins Token Macro Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Token Macro Plugin versions 2.7 and earlier Description: The issue is related to an XML external entities XXE vulnerability. It allows attackers who can control the content of the input file for the "XML" macro to have Jenkins resolve...

PHP Scripts Mall Investment MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Investment MLM Software is an investment money management system software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in the My Profile Section of PHP Scripts Mall Investment MLM Software version 2.0.2, which can be exploited by an attacker to execute...

Joruri Mail Input Validation Error Vulnerability

Joruri Mail is a set of IMAP e-mail client software written using Ruby/Rails . An input validation error vulnerability exists in Joruri Mail 2.1.4 and prior versions, which arises from a network system or product that does not properly validate incoming data and can be exploited by a remote...

eZ Platform Admin UI Cross-Site Scripting Vulnerability

eZ Platform is an open source enterprise content management system CMS. admin UI is one of the back-end management interface . A cross-site scripting vulnerability exists in the Admin UI in eZ Platform version 2.x, which can be exploited by an attacker to execute client-side code...

The vulnerability of the SSLv2 protocol implementation in the Network Security Services library allows attackers to disclose protected information.

The vulnerability of the SSLv2 protocol implementation in the Network Security Services library is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2019-0301

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing...

TPshopv2.0.0 open source mall system command execution vulnerability

Ltd. is a professional research and development of e-commerce software as the main business of the group of companies, set sales, marketing, product development, technical support, product implementation, after-sales service and many other functions in one of the professional enterprise managemen...

CVE-2019-6613

On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is used with various profile types and is accessed using SNMPv2...

PT-2019-18201 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with...

CVE-2018-15208

BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter...

DEBIAN-CVE-2018-12384

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3...

PT-2019-2951 · Red Hat +1 · Spacewalk-Proxy +1

Name of the Vulnerable Software and Affected Versions: spacewalk-proxy versions through 2.9 Description: A path traversal flaw was found in the way the proxy processes cached client tokens. This issue could allow a remote, unauthenticated attacker to test the existence of arbitrary files or execu...

Clever saml2-js authorization issue vulnerability

Clever saml2-js is a SAML Security Assertion Markup Language script used in Clever products. An authentication bypass vulnerability exists in Clever saml2-js versions 2.0 and 1.0. An attacker can use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

OpenPLC Buffer Overflow Vulnerability

OpenPLC is an open source programmable logic controller. A buffer overflow vulnerability exists in OpenPLCv2 version and OpenPLCv3 version. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

CVE-2018-16878

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...

jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery SSRF attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization...

ALPINE-CVE-2019-9494

The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both...

DEBIAN-CVE-2019-9495

The implementations of EAP-PWD in hostapd and wpasupplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpasupplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful...

DEBIAN-CVE-2019-9494

The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both...