The vulnerability of the Microsoft Azure Stack hardware platform, related to the ability to bypass authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Microsoft Azure Stack software platform relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created request...

Embedthis Software GoAhead Denial of Service Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. An unspecified vulnerability exists in Embedthis Software GoAhead. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted HTTP request...

Ruby OpenSSL extension encryption issue vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the software developer Yukihiro Matsumoto. openSSL extension is an OpenSSL security extension used in it. A cryptographic issue exists in the OpenSSL extension in Ruby versions 2011-09-01 through 2011-11-03,...

ProFTPD Code Issue Vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...

CVE-2019-18580

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host...

Design/Logic Flaw

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

Information Disclosure Vulnerability in Multiple Cisco Products (CNVD-2019-44128)

Cisco Webex Meeting Center is an online collaborative videoconferencing solution from Cisco.Cisco Webex Event Center is a webinar and online event management platform.Cisco Webex Support Center is a videoconferencing solution for service support teams. Cisco Webex Event Center is a webinar and...

The vulnerability of the Network Block Device (NBD) hardware emulation server in QEMU allows a hacker to induce a maintenance failure.

The vulnerability of the Network Block Device NBD emulation server of QEMU is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially crafted request...

The vulnerability of Cisco Firepower Management Center (FMC) software lies in its susceptibility to attacks due to insufficient checks on incoming traffic. This allows attackers to bypass virus checklists and malware policies, and send malicious traffic through the vulnerable device.

The vulnerability of Cisco Firepower Management Center FMC software exists due to insufficient checks on incoming traffic. Exploiting this vulnerability allows a malicious actor to bypass policies that require checking files and malware programs, and send malicious traffic through the vulnerable...

McAfee Advanced Threat Defense (ATD) Remote Code Execution Vulnerability

McAfee Advanced Threat Defense ATD is a set of threat detection and defense solutions from the U.S. company McAfee McAfee, providing malware analysis, sharing threat intelligence and isolating compromised systems. A remote code execution vulnerability exists in McAfee Advanced Threat Defense ATD...

McAfee Advanced Threat Defense (ATD) Information Disclosure Vulnerability (CNVD-2019-41727)

McAfee Advanced Threat Defense ATD is a set of threat detection and defense solutions from the U.S. company McAfee McAfee, providing malware analysis, sharing threat intelligence and isolating compromised systems. McAfee Advanced Threat Defense ATD has an information disclosure vulnerability. An...

CVE-2019-3650

Information Disclosure vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database...

PT-2019-3880

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A security feature bypass vulnerability exists in Microsoft Windows, related to the NETLOGON message, allowing an attacker to obtain the session key and sign messages. This can be...

Smartweares HOME easy Information Disclosure Vulnerability

Smartweares HOME easy is prone to an information disclosure vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Cisco Web Security Appliance AsyncOS Software Access Control Error Vulnerability

The Cisco Web Security Appliance WSA is a web security appliance from Cisco. The appliance provides SaaS-based access control, real-time web reporting and tracking, and security policy formulation.AsyncOS Software is the operating system used in it. AsyncOS Software is an operating system used in...

CVE-2019-1877 Cisco Enterprise Chat and Email Attachment Download Vulnerability

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...

Advantech WISE-PaaS/RMM Unauthorized Access Vulnerability

Advantech WISE-PaaS/RMM is a remote monitoring and management platform for IoT devices. An unauthorized access vulnerability exists in Advantech WISE-PaaS/RMM, which can be exploited by an attacker to submit a special request for unauthorized access to a device...

Red Hat JBoss Operations Network Elevation of Privilege Vulnerability

Red Hat JBoss Operations Network is a set of J2EE-based open source application servers . An elevation of privilege vulnerability exists in the Red Hat JBoss Operations Network CLI, which can be exploited by a remote attacker to submit a special request to elevate privileges to perform a maliciou...

Apple macOS Catalina System Extensions Component Elevation of Privilege Vulnerability

Apple macOS Catalina is a specialized operating system developed for Mac computers. An elevation of privilege vulnerability exists in the Apple macOS Catalina System Extensions component, which can be exploited by a local attacker to submit a specially crafted request for elevated privileges...