PT-2019-2789

Name of the Vulnerable Software and Affected Versions Cisco IOS Access Points APs Software affected versions not specified Description The issue is related to insufficient input validation in the 802.11r Fast Transition implementation of Cisco IOS Access Points APs Software. This could allow a...

Security feature bypass

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'...

CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

CVE-2019-1019 Microsoft Windows Security Feature Bypass Vulnerability

...

CVE-2019-0972: Undefined Security Weakness

This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a denial of service on the...

CVE-2019-1019: Exposure of Sensitive Information to an Unauthorized Actor

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...

Microsoft Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...

PT-2019-2472

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a denial of service in the Local Security Authority Subsystem Service LSASS that can be triggered by an authenticated attacker sending a specially crafted authenticati...

PT-2019-2487

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A security feature bypass issue exists, allowing an attacker to exploit the system by sending a specially crafted authentication request. This could enable the attacker to bypass...

CVE-2019-1845

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...

Cisco Unified Communications Manager IM&P Service, Cisco TelePresence VCS, and Cisco Expressway Series Denial of Service Vulnerability

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...

CVE-2019-1845: Improper Input Validation

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...

Information disclosure

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'...

CVE-2019-0971: Improper Encoding or Escaping of Output

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'...

PT-2019-2256

Name of the Vulnerable Software and Affected Versions Azure DevOps Server and Microsoft Team Foundation Server affected versions not specified Description The issue is related to an information disclosure vulnerability. It occurs when Azure DevOps Server and Microsoft Team Foundation Server do no...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0828-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc1129179. CVE-2019-9213: expanddownwards in mm/mmap.c...

Security Updates for Exchange (February 2019)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Multiple Vulnerabilites with the included libraries from Oracle Outside. CVE-2018-18223, CVE-2018-18224, CVE-2018-3147, CVE-2018-3217, CVE-2018-3218,...

PT-2019-6324

Name of the Vulnerable Software and Affected Versions hostapd version 2.6 Description A denial-of-service issue exists where an attacker could trigger an access point to send IAPP location updates for stations before the required authentication process has completed. This could lead to different...

CVE-2018-8635

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,...

CVE-2018-8635

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server,...