Tableau Code Issues Vulnerabilities

Tableau is a very easy to get started with the data analysis software, just import data through a simple point and click, mouse drag and drop to generate reports. There is a code issue vulnerability in Tableau. The vulnerability arises from a design or implementation problem in the code developme...

Design/Logic Flaw

The legacy finger service TCP port 79 is enabled by default on various older Lexmark devices...

Design/Logic Flaw

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account...

Design/Logic Flaw

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file...

Design/Logic Flaw

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK...

Design/Logic Flaw

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds wi...

Design/Logic Flaw

components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary OS commands by spawning a child process as the current user on the victim's machine when the search function's autocomplete feature is used. The victim must import data from an Active Directory with a...

Design/Logic Flaw

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

Design/Logic Flaw

The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wpupload directory for file uploads...

Design/Logic Flaw

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

Webmin Code Issue Vulnerability

Webmin is a set of Web-based system management tools for Unix-like operating systems. Webmin is vulnerable to a code issue. The vulnerability arises from an improper design or implementation during code development of a Web system or product. No details of the vulnerability are available at this...

Autodesk Design Review Code Issue Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing and tracking changes to 2D and 3D design files. A code issue vulnerability exists in Autodesk Design Review. An attacker could exploit...

Autodesk Design Review Resource Management Error Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing and tracking changes to 2D and 3D design files. Autodesk Design Review is vulnerable to a resource management error. Detailed...

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

CVE-2019-7362

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution...

Design/Logic Flaw

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

CVE-2019-7363

CVE-2019-7363 describes a use-after-free vulnerability in Autodesk Design Review for versions 2011, 2012, 2013 and 2018. The issue arises when processing malicious DWF files, which may leverage the use-after-free to achieve code execution. Connected records reiterate the same core details (root c...

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

CVE-2019-7362

Autodesk Design Review (Windows) is affected by a DLL preloading vulnerability (CVE-2019-7362) in ADR versions 2011, 2012, 2013, and 2018. The issue allows code execution if a user opens a malicious DWF file, due to how a DLL is loaded. Root cause: DLL preloading. Exploitation details, affected b...