Cisco Firepower Threat Defense Policy Bypass Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. A policy bypass vulnerability exists in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol inspection engine in Cisco FTD versions...

Cisco Small Business 220 Series Smart Switches Input Validation Error Vulnerability

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. An input validation error vulnerability exists in Cisco Small Business 220 Series Smart Switches. An attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite for developing software applications. This component is part of the Oracle Fusion Middleware software platform. It allows unauthorized access to protected data or causes partial service interruption for attackers.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite, which is part of the Oracle Fusion Middleware software platform, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite for developing software applications. This component is part of the Oracle Fusion Middleware software platform. It allows unauthorized access to protected data or causes partial service interruption for attackers.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite, which is part of the Oracle Fusion Middleware software platform, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized...

MikroTik RouterOS Denial of Service Vulnerability (CNVD-2019-25984)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in Mikrotik RouterOS versions prior to 6.44.5. A remote attacker can exploit the...

MikroTik RouterOS Denial of Service Vulnerability (CNVD-2019-25988)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in Mikrotik RouterOS versions prior to 6.44.5. An attacker can exploit the...

The vulnerability of the sub-component of the CRM User Management Framework within the Oracle Common Applications component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications system, part of the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using t...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation system, is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

CVE-2019-2824

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

DEBIAN-CVE-2019-11713

A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

The vulnerability of ABB’s automation control panels and the PB610 Panel Builder 600 software, which allows a intruder to read and write configuration files of HMI devices or trigger a system restart.

The vulnerabilities of ABB CP620 1SAP520100R0001, CP620 1SAP520100R4001, CP620-WEB 1SAP520200R0001, CP630 1SAP530100R0001, CP630-WEB 1SAP530200R0001CP, CP635 1SAP535100R0001, CP635 1SAP535100R5001, CP635-B 1SAP535100R2001, CP635-WEB 1SAP535200R0001, CP651 1SAP551100R0001, CP651-WEB 1SAP551200R000...

ABB PB610 IDAL HTTP server buffer overflow vulnerability

ABB PB610 is a software from ABB Switzerland that designs graphical user interfaces for the CP600 control panel platform. the IDAL HTTP server is one of the HTTP Hypertext Transfer Protocol servers. A buffer overflow vulnerability exists in the IDAL HTTP server in the ABB PB610 that can be...

The vulnerability of the Cisco Wide Area Application Services Software’s proxy server is related to authentication errors when requesting connections to the HTTPS proxy server. This vulnerability allows a hacker to use the WAAS Central Manager as an HTTPS proxy server.

The vulnerability of the Cisco Wide Area Application Services Software’s proxy server is related to authentication errors when requesting connections to the HTTPS proxy server. Exploiting this vulnerability allows a malicious actor to use the WAAS Central Manager as an HTTPS proxy server by sendi...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

PT-2019-2512 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.3.0 Description: The issue is related to the XMLDecoder component of the Oracle WebLogic Server, which has weaknesses in its deserialization mechanism. This can be exploited by a remot...

Gemalto Admin Control Center Access Control Error Vulnerability

Gemalto Admin Control Center is a set of Web-based Sentinel user tools from Gemalto. The product is mainly used to query and manage hardware and software Sentinel license keys. A security vulnerability exists in Gemalto Admin Control Center versions prior to 7.92, which stems from the program's u...

ALPINE-CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

UBUNTU-CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...