CVE-2020-0601

The CVE-2020-0601 issue affects Windows CryptoAPI (Crypt32.dll) and its ECC certificate validation, enabling a spoofing attack where a forged code-signing certificate could make malware appear trusted. Affected platforms include Windows 10 and Windows Server 2016/2019, with the vulnerability tied...

CVE-2019-19509

CVE-2019-19509 affects rConfig 3.9.3 (and related 3.9.x) where the path parameter in ajaxArchiveFiles.php is passed directly to exec, enabling a remote authenticated user to execute arbitrary commands. Multiple public disclosures and exploits (e.g., exploit-db entries for 3.9.3 Auth RCE and 3.9.4...

CVE-2019-17558

CVE-2019-17558 affects Apache Solr 5.0.0–8.3.1 and allows remote code execution via the VelocityResponseWriter. An attacker can supply a Velocity template through configset velocity/ or via a parameter; enabling the resource loader for templates requires a configured response writer. Solr 8.4 rem...

CVE-2019-17621

CVE-2019-17621 affects the D-Link DIR-859 router (firmware 1.05/1.06B01 Beta01). The issue is an unauthenticated remote command-execution vulnerability via the UPnP endpoint at /gena.cgi. An attacker on the local network can send a crafted HTTP SUBSCRIBE request to the UPnP service and execute sy...

CVE-2019-20085

Summary: CVE-2019-20085 affects TVT NVMS-1000 devices, enabling directory traversal through GET /.. requests and potentially exposing sensitive files. The normal/affected component is the NVMS-1000 web interface handling file paths, with a root cause linked to directory traversal exposure. Public...

CVE-2019-20074

CVE-2019-20074 affects Netis/DL4323 devices. The vulnerability allows any user role to view sensitive information (e.g., user password, FTP password) via the form2saveConf.cgi page, indicating an information disclosure weakness in the device UI. Reported CVSS metrics from NVD indicate network acc...

CVE-2019-19781

CVE-2019-19781 affects Citrix ADC (formerly NetScaler) and Citrix Gateway/SD-WAN WANOP appliances. The issue is a path traversal flaw in the ADC/Gateway stack that could enable remote code execution. Exploitation was discussed publicly with advisories and mitigations; Citrix released fixes and mi...

CVE-2019-10758

MongoDB mongo-express ≤0.53.x is vulnerable to Remote Code Execution via endpoints using toBSON, due to unsafe use of the vm module to run exec commands. Affected component: mongo-express server-side routes that invoke toBSON. Root cause: misusing vm to execute commands in a non-safe environment....

CVE-2019-7483

SonicWall SMA100 is affected by CVE-2019-7483: an unauthenticated Directory Traversal in the handleWAFRedirect CGI that can reveal file presence on the server. The affected product is SonicWall SMA100; evidence across multiple sources consistently describes directory traversal affecting unauthent...

CVE-2019-8646

CVE-2019-8646 is an out-of-bounds read vulnerability fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. Apple security pages state a remote attacker could leak memory via this issue in affected Core Data paths, with CVE-2019-8646 specifically tied to memory leakage (watchOS 5.3 ...

CVE-2019-8605

CVE-2019-8605 is a use-after-free vulnerability in Apple’s XNU kernel (iOS, macOS, tvOS, watchOS) that could allow a malicious app to execute arbitrary code with system privileges. The initial description notes a use-after-free that was fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, and watc...

CVE-2019-7286

CVE-2019-7286 is a memory corruption bug in iOS CFPrefsDaemon that could enable privilege escalation. Project Zero and related analyses show it as one of five iPhone exploit chains used in targeted in-the-wild campaigns, with chain components exploiting iOS WebKit/kernel paths. Apple released a f...

CVE-2019-8506

CVE-2019-8506 is a type-confusion memory issue that affects WebKit components and was fixed in multiple Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes/Windows, iCloud for Windows 7.11) and WebKitGTK/WebKitGTK+ up to 2.28.x. The vulnerability can allow arbitrary code execut...

CVE-2019-8526

CVE-2019-8526 is a use-after-free vulnerability in macOS Mojave that could allow a locally authenticated attacker to gain elevated privileges. The issue was addressed with improved memory management and is fixed in macOS Mojave 10.14.4. The CVSS data (3.1) indicates HIGH impact on confidentiality...

CVE-2019-7287

CVE-2019-7287 is described in the connected materials as a memory corruption/heap overflow in Apple iOS, arising from an unchecked memcpy in the IOKit ProvInfoIOKitUserClient::ucEncryptSUInfo() path. The initial description notes a memory corruption fix in iOS 12.1.4 and potential kernel code exe...

CVE-2019-4716

IBM Planning Analytics (PA) versions 2.0.0–2.0.8 are vulnerable to a configuration overwrite that lets an unauthenticated attacker log in as admin and execute code as root/SYSTEM via TM1 scripting, potentially fully compromising the host. IBM remediation is to upgrade to PA 2.0.9 or apply availab...

CVE-2019-7481

SonicWall SMA100 is affected by CVE-2019-7481, an information-disclosure vulnerability that allows unauthenticated attackers to gain read-only access to unauthorized resources. The vulnerability impacts SMA100 versions up to and including 9.0.0.3 (and earlier per the CVE description). Reported CV...

CVE-2019-18935

CVE-2019-18935 affects Progress Telerik UI for ASP.NET AJAX (RadAsyncUpload deserialization). The vulnerability allows remote code execution when encryption keys are known (e.g., via CVE-2017-11317/11357 or other means). Exploitation, if possible, can occur over network with low complexity and no...

CVE-2019-1458

CVE-2019-1458 is a Windows Win32k elevation-of-privilege flaw affecting win32k.sys. The root cause is an uninitialized field in the server window dispatch table (gpsi->mpFnid_serverCBWndProc[FNID_SWITCH]), which leaves extraWnd data improperly sized. This allows an attacker to write arbitrary ...

CVE-2019-17270

CVE-2019-17270 affects Yachtcontrol Webapplication 1.0. It enables unauthenticated remote command execution via /pages/systemcall.php?command={COMMAND}, allowing arbitrary OS commands and exposure of command output on affected Yachtcontrol webservers exposed to Dutch GPRS/4G ranges. The issue ari...