@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by CVE-2019-10744 via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

CVE-2015-9251: UAA contains vulnerable jQuery version | Cloud Foundry

Medium Vendor The OpenJS Foundation Affected Cloud Foundry Products and Versions Severity is medium unless otherwise noted. UAA Release OSS is vulnerable prior to v73.3.0 Description Cloud Foundry UAA versions prior to 73.3.0, contains a vulnerable version of jQuery. A remote attacker can perform...

PT-2019-13247 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-50 Q16 Description: The issue is related to memory leaks in ImageMagick due to an error in wand/mogrify.c. This error occurs at AcquireMagickMemory. Recommendations: For ImageMagick version 7.0.8-50 Q16, at the momen...

Stored cross-site scripting in Grid component in Vaadin 7 and 8

Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector. See CWE-80: Improper Neutralization of...

DEBIAN-CVE-2019-5832

Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Micro Focus NetIQ Self Service Password Reset Information Disclosure Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. An information disclosure vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to obtain sensitive information...

SQL Injection

Overview Versions of sequelize prior to 3.35.1 are vulnerable to SQL Injection. The package fails to sanitize JSON path keys in the Postgres dialect, which may allow attackers to inject SQL statements and execute arbitrary SQL queries. Recommendation Upgrade to version 3.35.1 or later. References...

PT-2019-2863 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-50 Q16 Description: The issue is related to a heap-based buffer overflow in the SetPixelViaPixelInfo function due to an error in MagickCore/enhance.c. This can be exploited by a remote attacker using a specially...

Mozilla Firefox ESR Security Advisories (MFSA2019-19, MFSA2019-20) - Windows

Mozilla Firefox ESR is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Path Traversal

Overview Versions of crud-file-server prior to 0.9.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths. Recommendation Upgrade to version 0.9.0 or later. References - HackerOne Report -...

Prototype Pollution

Overview Versions of extend prior to 3.0.2 for 3.x and 2.0.2 for 2.x are vulnerable to Prototype Pollution. The extend function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation If you're...

Mozilla Firefox Security Advisories (MFSA2019-17, MFSA2019-18) - Windows

Mozilla Firefox is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Prototype Pollution in @apollo/gateway

Versions of @apollo/gateway prior to 0.6.2 are vulnerable to Prototype Pollution. The package uses deepMerge to merge objects, which may allow attackers to alter the Object prototype through queries with GraphQL aliases. Carefully constructed payloads can override properties of all objects in the...

ids-enterprise-ng (>=4.10.0-beta.0, <=5.3.0) potentially affected by unknown CVE via ids-enterprise (>=4.10.0, <=4.18.1)

ids-enterprise NPM version =4.10.0, =4.10.0-beta.0, =5.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-49R3-3H96-RWJ6...

ipswitch WS_FTP Server Directory Traversal Vulnerability (CNVD-2019-24247)

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. The vulnerability can be exploited by an attacker to obtain pathnames on the host operating system via the SCP...

Cross-Site Scripting (XSS) in cloudcmd

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later...

Cisco RV130W 1.0.3.44 - Remote Stack Overflow

!/usr/bin/python Exploit Title: Cisco RV130W Remote Stack Overflow Google Dork: n/a Date: Advisory Published: Feb 2019 Exploit Author: @0x00string Vendor Homepage: cisco.com Software Link: https://www.cisco.com/c/en/us/products/routers/rv130w-wireless-n-multifunction-vpn-router/index.html Version...

@byted/beejs (>=1.1.2, <=1.2.18), @wenbo/fis3-deploy-zip (1.0.0) +43 more potentially affected by unknown CVE via concat-stream (>=1.4.1, <=1.4.8)

concat-stream NPM version =1.4.1, =1.1.2, =0.0.0, =0.3.4, =0.0.0, =0.0.1, =1.0.0, =0.0.19, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =0.0.7, =0.0.69 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G74R-FFVR-5Q9F...

GHSA-XC7V-WXCW-J472 Memory Exposure in tunnel-agent

Versions of tunnel-agent before 0.6.0 are vulnerable to memory exposure. This is exploitable if user supplied input is provided to the auth value and is a number. Proof-of-concept: js require'request' method: 'GET', uri: 'http://www.example.com', tunnel: true, proxy: protocol: 'http:',...

Bitbucket Path Traversal / Remote Code Execution Vulnerability

Bitbucket Data Center had a path traversal vulnerability in the Data Center migration tool. A remote attacker with authenticated user with admin permissions can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that...