779 matches found
Unspecified vulnerability in F5 BIG-IP ASM (CNVD-2019-47430)
F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in F5 BIG-IP ASM version 15.0.1 that stems from the program not...
Malwarebytes AdwCleaner Code Issue Vulnerability
Malwarebytes AdwCleaner is a utility program from the American company Malwarebytes. The program is mainly used to scan and remove pre-installed software such as advertisements from Windows computers. A code issue vulnerability exists in versions of Malwarebytes AdwCleaner prior to 8.0.1. The...
Xiaomi 5S Plus Access Control Error Vulnerability
The Xiaomi 5S Plus is a smartphone from Chinese company Xiaomi Technology Xiaomi. An access control error vulnerability exists in the com.miui.powerkeeper app in Xiaomi 5S Plus build fingerprint: Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys. The vulnerability stems from the network...
CVE-2019-5250
Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...
CVE-2019-4130
IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 158280...
TmaxSoft JEUS Path Traversal Vulnerability
TmaxSoft JEUS is a Web application server from TmaxSoft Korea. A path traversal vulnerability exists in TmaxSoft JEUS 7 Fix0 version to 5 and TmaxSoft JEUS 8Fix0 version to 1. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in the...
March 5, 2019, update for Access 2010 (KB4018363)
March 5, 2019, update for Access 2010 KB4018363 This article describes update 4018363 for Microsoft Access 2010 that was released on March 5, 2019.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't apply to th...
CVE-2019-2939
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While th...
NVIDIA Shield TV Experience Buffer Overflow Vulnerability
The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A buffer overflow vulnerability exists in the NVIDIA Tegra bootloader in NVIDIA Shield TV Experience versions prior to 8.0.1, which originates from an incorrect boundary check performed by the...
OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
CVE-2019-11466
In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access...
Linux kernel memory leak vulnerability (CNVD-2019-31644)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory leak vulnerability exists in registerqueuekobjects in net/core/net-sysfs.c in versions of Linux kernel prior to 5.0.1. An attacker could exploit this...
Cisco WebEx Meetings Server Input Validation Error Vulnerability
Cisco WebEx Meetings Server CWMS is a versatile conferencing solution that includes audio, video, and Web conferencing in the WebEx Meetings Program. An input validation error vulnerability exists in the Web management interface in Cisco CWMS versions prior to 4.01, which stems from the program's...
DEBIAN-CVE-2019-2818
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
UBUNTU-CVE-2019-2739
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...
PT-2019-13238 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: The issue is a heap-based buffer over-read in the JBIG2Stream::readTextRegionSeg function, which can be triggered by sending a crafted PDF document to the pdftoppm tool. This might allow an attacker to cause...
CVE-2019-4135
IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users. IBM X-Force ID: 158331...
PT-2019-16916 · Ibm · Ibm Security Access Manager
Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue allows authenticated users to impersonate other users, potentially leading to unauthorized access. Recommendations: For versions 9.0.1 through 9.0.6, update to a...
CVE-2019-12555
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...