CVE-2019-19220
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0064/
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0064/
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0065/
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0066/
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0059/
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. Date published : 2020-04-30 https://herolab.usd.de/security-advisories/usd-2019-0060/
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related...
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host Date published : 2020-04-30 https://s.apache.org/7sr1x https://lists.apache.org/thread.html/r0a0a701610b3bcdf14634047313adab3f1628bb9aa55cf29cd262ef5@%3Ccommits.ofbiz.apache.org%3E
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks. Date published : 2020-04-30 https://s.apache.org/n4vnt http://packetstormsecurity.com/files/157514/Apache-OFBiz-17.12.03-Cross-Site-Request-Forgery.html
In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting ‘Isolated institutions’ is turned on. Date published...
Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful...
A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update...
ZTE’s SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no...
A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a specific command. This affects: ZXCTN 6500 version V2.10.00R3B87....
ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program’s failure to optimize the response of failure to the request, the caller can directly view the internal error code...