Cisco Webex Meetings Server Information Disclosure

The vulnerability of the Cisco Webex Meetings Server’s web interface management software is related to configuration errors. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created request...

CocoaDebug - iOS Debugging Tool

iOS Debugging Tool Shake to hide or show the black bubble. support both device and simulator Long press the black bubble to show UIDebuggingInformationOverlay. Apple's Private API, support iOS 10/11/12 Application memory usage and FPS. List all print and NSLog messages which have been written by...

Jenkins Matrix Project Code Execution

The vulnerability of the pom.xml components and FilterScript.java src/main/java/hudson/matrix/FilterScript.java of the Matrix Project plugin is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow a malicious actor to exit the...

Cisco Firepower Management Center SSL/TLS Syntax Analyzer Bypass Access Control

The vulnerability in the syntax analyzer of Cisco Firepower Management Center’s network management software for Secure Sockets Layer SSL and Transport Layer Security TLS protocols is related to errors in analyzing attributes in TLS packet headers. Exploiting this vulnerability can allow a malicio...

PowerShell Windows Privilege Escalation

The vulnerability of PowerShell command interpreters in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

LIGO! Soft Comfort Access Control Code Execution

The vulnerability of the LOGO! Soft Comfort development software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon opening a specially crafted project...

Microsoft SharePoint Security Configuration Code Execution

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created page in the vulnerable version of Microsof...

ASP.NET Core DoS

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the ASP.NET Core application...

Modicon DoS

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in handling exceptional situations. Exploiting this vulnerability can allow an intruder, operating remotely, to cause malfunctions during the reading of memory blocks with invalid data sizes or wit...

Microsoft Dynamics Security Configuration Bypass

The vulnerability of the Microsoft Dynamics resource planning software is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on email attachments by intercepting POST requests...

Kerberos Protocol Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the authentication mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

SAP HANA Extended Application Services Information Disclosure Vulnerability (CNVD-2019-34744)

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...

PT-2019-2378

Name of the Vulnerable Software and Affected Versions Microsoft IIS Server affected versions not specified Description A denial of service issue exists in Microsoft IIS Server due to improper handling of requests by the optional request filtering feature. This can be exploited by a remote attacke...

PT-2019-2620

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft browsers affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execut...

electricflow globally and unconditionally disabled SSL/TLS certificate validation

electricflow unconditionally disabled SSL/TLS certificate validation for the entire Jenkins controller JVM during the deployment/publication of an application. electricflow no longer does that. Instead, the existing opt-in option to ignore SSL/TLS errors is used during deployment for the specific...

Python Information Disclosure Vulnerability (CNVD-2019-17319)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An information disclosure vulnerability exists in Python. The vulnerability stems from errors such as...

CVE-2019-6532

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution...

CVE-2019-6532

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution...

Yubico pam-u2f information disclosure vulnerability

Yubico pam-u2f is a portable authentication module for U2F. An information disclosure vulnerability exists in Yubico pam-u2f version 1.0.7. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An unauthorized attacker could...

Windows Storage Service Privilege Escalation

The vulnerability of the Windows operating system’s Storage Service component is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...