CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15557

CVE-2019-15557 affects XM^online 2 User Account and Authentication server 1.0.0. All connected sources describe a SQL injection vulnerability exploitable via a tenant key, resulting in high impact (C:H/I:H/A:H per CVSS3) with network access and no authentication required. The root cause is a SQL ...

CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15558

CVE-2019-15558 affects XM^online 2 Common Utils and Endpoints 0.2.1. The vulnerability is a SQL injection tied to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. CVSS metrics from NVD indicate a NETWORK-exposed, LOW-complexity attack with HIGH confidentiality, integrity, a...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

PT-2019-14273

Name of the Vulnerable Software and Affected Versions XM^online 2 User Account and Authentication server version 1.0.0 Description The issue allows SQL injection via a tenant key. This means an attacker could potentially inject malicious SQL code using the tenant key to access or manipulate...

CVE-2019-15558: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15557: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

PT-2019-14274

Name of the Vulnerable Software and Affected Versions XM^online 2 Common Utils and Endpoints version 0.2.1 Description The issue allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. Recommendations For version 0.2.1, at the moment, there is no...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

DEBIAN-CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

Out-of-bounds

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

UBUNTU-CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

CVE-2019-14380 affects libopenmpt up to 0.4.4 (pre-0.4.5); the issue is an out-of-bounds read in XM and MT2 playback that can crash the application. Debian/DSA notes a fix in libopenmpt with a security update (0.4.3-1+deb10u1); other references corroborate a vulnerability in the library before 0....

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...