13335 matches found
Buffer Overflow
The X11 Xorg libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol da...
PT-2019-2059 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A vulnerability in the remote access VPN session manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on...
Cisco Wireless LAN Controller Resource Management Error DoS
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
Cisco Wireless LAN Controller Resource Management Error DoS
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
Junos OS Firewall Configuration Compromise
The vulnerability of Junos OS’ firewall filter configuration is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
jdhcpd Junos OS DoS
The vulnerability of the jdhcpd daemon in the Junos OS operating system is related to resource management errors. Exploiting this vulnerability can allow a attacker to cause service failures...
Cisco Wireless LAN Controller Resource Management Error DoS
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
Command-Line Interface Gain Access OS
The vulnerability of the command-line interface of microprogramming software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, and 3800 is related to configuration errors. Exploiting this vulnerability can allow an attacker to gain access to the built-in Linux operating system...
SUSE-SU-2018:3467-2 Security update for smt
SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...
Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Oracle MySQL Unauthorized Access
The vulnerability in the Oracle MySQL server component is related to user access control errors. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the server’s functions and data...
CUPS Printing Server Auth Bypass Privilege Escalation
The vulnerability of the CUPS printing server is related to the SetEnv and PassEnv directives. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...
nginx Phusion Passenger Confidential Data Access
The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...
CUPS Printing Server Auth Bypass Info Disclosure
The vulnerability of the CUPS printing server is related to the improper handling of certain include directives. This allows unprivileged users to gain access to and read arbitrary files from the superuser’s perspective. Exploiting this vulnerability enables a perpetrator to gain access to...
Systemd DoS
The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Apache HTTP Server mod_auth_mellon Character Conversion Redirect
The vulnerability of the modauthmellon authentication module in the Apache HTTP Server is related to a character conversion error involving the “\” symbol. Exploiting this vulnerability could allow an attacker to redirect users to a malicious website remotely...
Twig Template Compiler Confidential Data Access
The vulnerability of the Twig template compiler relates to errors in a isolated programming environment. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Open-Xchange: Two heap use-after-free errors in IMAP operations
Summary ======= We’ve found two heap use-after-free errors, one in lib-storage/index/index-storage.c: indexcopycachefields and one in lib-index/mail-index-sync-update.c: mailindexsyncrecordreal. Error 1: indexcopycachefields ---------------------------------------------- This error involves two...
Cisco IOS XE Info Disclosure
The vulnerability of the Cisco IOS XE operating system’s web interface is related to configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using a specially crafted request...
Microsoft Office Access Connectivity Engine Code Execution
The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...