Lucene search
+L

7004 matches found

CNVD
CNVD
added 2019/11/25 12:00 a.m.10 views

ROS communications-related packages buffer overflow vulnerability

ROS communications-related packages is a package related to ROS Robot Operating System communications. A buffer overflow vulnerability exists in ROS communications-related packages version 1.14.3 and earlier. The vulnerability arises when a networked system or product performs an operation in...

9.8CVSS7.4AI score0.03113EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/24 12:00 a.m.6 views

Unauthorized Access Vulnerability in the Employment Management System of Xi'an Zerui Communications Co.

The Employment Management System is an employment system that manages the source data of graduates, establishes a database of employers, and realizes the interoperability of information among students, schools, and employers. An unauthorized access vulnerability exists in the Employment Managemen...

6.5AI score
SaveExploits0
OSV
OSV
added 2019/11/22 9:15 p.m.17 views

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

9.8CVSS8.3AI score
SaveExploits0References3
OSV
OSV
added 2019/11/22 9:15 p.m.7 views

DEBIAN-CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

9.8CVSS9.4AI score0.03113EPSS
SaveExploits0References1
NVD
NVD
added 2019/11/22 9:15 p.m.16 views

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

9.8CVSS9.9AI score0.03113EPSS
SaveExploits0References3
OSV
OSV
added 2019/11/22 9:15 p.m.7 views

UBUNTU-CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

9.8CVSS7.8AI score0.03113EPSS
SaveExploits0References5
Prion
Prion
added 2019/11/22 9:15 p.m.25 views

Buffer overflow

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

7.5CVSS9.8AI score0.03113EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/11/22 8:29 p.m.141 views

CVE-2019-13566

CVE-2019-13566 affects ROS communications-related packages (ros_comm / ros-melodic-ros-comm) up to version 1.14.3. The issue is a buffer overflow triggered by an IP address with a long hostname, leading to denial of service and potentially arbitrary code execution. No remediation details are prov...

9.8CVSS9.8AI score0.03113EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/11/21 12:00 a.m.9 views

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2019-45003)

Cisco Unified Communications Domain Manager CUCDM is a Cisco Cisco company dedicated to unified communications solutions in the call processing components. The component has scalable, distributable, and highly available enterprise voice-over-IP call processing capabilities. A cross-site scripting...

5.4CVSS6.6AI score0.00633EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/21 12:00 a.m.9 views

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2019-42752)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

8.8CVSS8.1AI score0.01605EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/11/20 4:00 p.m.77 views

Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

5.4CVSS2.4AI score0.00633EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2019/11/20 3:35 a.m.13 views

Clario: Lack of HTTPS in service communications

Summary: Lack of HTTPS in login page http://translate.kromtech.com/user/login Steps To Reproduce: http://translate.kromtech.com/user/login site, that allows accessing unencrypted of the site without SSL/TLS certificate...

0.9AI score
SaveExploits0
Symantec
Symantec
added 2019/11/20 12:00 a.m.32 views

Cisco Unified Communications Domain Manager CVE-2019-15968 HTML Injection Vulnerability

Description Cisco Unified Communications Domain Manager is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing...

5.6AI score0.00633EPSS
SaveExploits0References1
Symantec
Symantec
added 2019/11/20 12:00 a.m.46 views

Cisco Unified Communications Manager CVE-2019-15972 SQL Injection Vulnerability

Description Cisco Unified Communications Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...

1.4AI score0.01605EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Unified Communications Manager system allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Unified Communications Manager web interface management interface is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted SQL query...

6.8CVSS5.6AI score0.01495EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.9 views

The vulnerability in the web interface for managing Cisco Unified Communications Manager systems, including Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and the integrated messaging system Cisco Unity Connection, allows a perpetrator to send arbitrary requests.

The vulnerability of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, and the integrated messaging system Cisco Unity Connection’s web interfaces is related ...

7.1CVSS6.5AI score0.00671EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.9 views

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME systems allows a perpetrator to execute arbitrary codes or access confidential information.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME web interfaces exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes or gain access to...

6.1CVSS6.6AI score0.01057EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.10 views

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose...

6.4CVSS6.4AI score0.01075EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.13 views

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection exists due to the lack of security measures taken to protect the w...

6.1CVSS6.7AI score0.01057EPSS
SaveExploits0References3
Fedora
Fedora
added 2019/11/18 1:52 a.m.20 views

[SECURITY] Fedora 29 Update: freetds-1.1.20-1.fc29

FreeTDS is a project to document and implement the TDS Tabular DataStream protocol. TDS is used by SybaseTM and MicrosoftTM for client to database server communications. FreeTDS includes call level interfaces for DB-Lib, CT-Lib, and ODBC...

2AI score
SaveExploits0
Rows per page
Query Builder