13335 matches found
Cisco Identity Services Engine Arbitrary Certificate Generation
The vulnerability of the RESTful Services Programmable Interface ERS implementation of the Cisco Identity Services Engine platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to generate arbitrary certificates signed by the internal certification...
ChakraCore Microsoft Edge RCE
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Access Connectivity Engine Code Execution
The vulnerability of the Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Access Connectivity Engine Code Execution
The vulnerability of the Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Fuzzing: Common Tools and Techniques
Fuzzing is a software testing methodology that can be used from either a black or white box perspective and predominantly consists of providing deliberately malformed inputs to an application to identify errors such as unhandled exceptions, memory spikes, thread hangs, read access violations or...
PHOENIX CONTACT PLCNext AXC F 2152
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Phoenix Contact Equipment: PLCNext AXC F 2152 Vulnerabilities: Key Management Errors, Improper Access Control, Man-in-the-Middle, Using Component with Known Vulnerabilities 2. RISK EVALUATION...
SIMATIC device software Cryptography Error
The vulnerability of SIMATIC device software is related to errors in the use of cryptography. Exploiting this vulnerability can allow a perpetrator with access to the web interface to obtain the TLS session key while monitoring the TLS traffic between the legitimate user and the device...
Cisco Application Policy Infrastructure Controller Encryption Key Deletion Privilege Escalation
The vulnerability of the Cisco Application Policy Infrastructure Controller automation tool is related to errors in the mechanism for deleting encryption keys. Exploiting this vulnerability could allow an attacker to gain access to protected information...
Cisco Catalyst SNMP DoS
The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco Catalyst network devices is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger maintenance failures through a specially crafted request...
Cisco Wireless LAN Controllers SSH Unauthorized Access
The vulnerability of the Secure Shell SSH network protocol implementation in Cisco Wireless LAN Controller WLC software relates to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Cisco Directory Connector Path Validation Unauthorized Access
The vulnerability of the application for synchronizing identifiers in the Cisco Directory Connector is related to errors in the mechanism for checking the path of dynamically attached libraries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
Cisco Prime Infrastructure SQL Injection Evolved Programmable Network Manager
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries by sending specially...
ChakraCore Microsoft Edge RCE
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
ChakraCore Memory Object Handling Code Execution
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
ChakraCore Memory Object Handling Code Execution
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
Cisco Wireless LAN Controllers Data Compromise
The vulnerability of the mechanism for identifying web interfaces of microprogrammed software controllers for Cisco Wireless LAN Controllers WLC is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information by...
Microsoft SQL Server Analysis Services Access Disclosure
The vulnerability of the Analysis Services service in the Microsoft SQL Server database management system is related to errors in processing SQL queries. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information...
CVE-2019-12347
In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acmeaccountkeysedit.php action. The vulnerability occurs due to input validation errors...
PT-2019-2632 · Gnome +7 · Gnome Gvfs +7
Name of the Vulnerable Software and Affected Versions: GNOME gvfs versions prior to 1.38.3 GNOME gvfs versions 1.40.x prior to 1.40.2 GNOME gvfs versions 1.41.x prior to 1.41.3 Description: The issue is related to errors in the authorization procedure of the GVFS subsystem in the GNOME desktop...
CVE-2019-7085
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...