5 September 2019

12 results · Clear filters · Feed

• Medium 5.9
  CVE-2019-10753

  Incorrect Resource Transfer Between Spheres in eclipse-wtp

  In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred…

  eclipse-wtp com.diffplug.spotless:spotless-eclipse-cdt com.diffplug.spotless:spotless-eclipse-wtp com.diffplug.spotless:spotless-eclipse-groovy Ubuntu Maven
  Sep 5, 2019
• Medium 6.5
  CVE-2019-5070

  An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and ea…

  Sep 5, 2019
• Medium 5.3
  CVE-2019-5065

  An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.…

  Sep 5, 2019
• Medium 5.9
  CVE-2019-15939

  Divide By Zero in OpenCV.

  An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

  opencv opencv-python opencv-contrib-python opencv Debian Ubuntu PyPI
  Sep 5, 2019
• Medium 5.3
  CVE-2019-4186

  IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Hos…

  IBM Jazz for Service Management
  Sep 5, 2019
• Medium 5.4
  CVE-2019-4149

  IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0…

  IBM Business Automation Workflow Business Process Manager
  Sep 5, 2019
• Medium 5.9
  CVE-2019-4321

  IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - …

  IBM Intelligent Operations Center
  Sep 5, 2019
• Medium 4.3
  CVE-2019-12635

  Cisco Content Security Management Appliance Information Disclosure Vulnerability

  A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not corre…

  Cisco Cisco Content Security Management Appliance (SMA) Network devices
  Sep 5, 2019
• Medium 6.1
  CVE-2019-12644

  Cisco Identity Services Engine Cross-Site Scripting Vulnerability

  A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an af…

  Cisco Cisco Identity Services Engine Software Network devices
  Sep 5, 2019
• Medium 6.7
  CVE-2019-12645

  Cisco Jabber Client Framework for Mac Code Execution Vulnerability

  A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper fi…

  Cisco Cisco Jabber for Mac Network devices
  Sep 5, 2019
• Medium 5.3
  CVE-2019-12632

  Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

  A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly va…

  Cisco Cisco Finesse Network devices
  Sep 5, 2019
• Medium 5.3
  CVE-2019-12633

  Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability

  A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper …

  Cisco Cisco Unified Contact Center Express Network devices
  Sep 5, 2019