Cisco Firepower Management Center SQL Injection

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender arises due to file processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox Display Error Spear Phishing

The vulnerability of Firefox browsers arises due to errors in the character display in file names within the “Downloads” tab. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Cisco Firepower Management Center SQL Injection

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2019-3640

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

PT-2019-3638

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

PT-2019-3632

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context ...

PT-2019-3637

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

Code injection

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an...

CVE-2009-0136

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...

Fedora 30 : glpi (2019-a1636592a3)

GLPI version 9.4.4 This is a security release, upgrading is highly recommended Non exhaustive list of changes : - security Prevent account takeover vulnerability , - security Prevent execution of XSS on rich text, - fix cache key lenght issues, - fix user picture removal at login, - several fixes...

Cisco IOS DoS

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE Command Execution

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to authentication process errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...

Intel microprocessor Synchronization Disclosure

The vulnerability of Intel microprogramming software arises from synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Firefox Thunderbird IPC Error Information Disclosure

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to process-interaction errors. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information...

Firefox Thunderbird HTTP Live Streaming Data Compromise

The vulnerability in the implementation of the HTTP Live Streaming protocol for Firefox and Firefox ESR browsers, as well as the Thunderbird email client for Android, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine database management system for the Windows operating system exists due to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Design/Logic Flaw

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...

CVE-2019-12677 Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...