11408 matches found
CVE-2019-1919
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Design/Logic Flaw
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
CVE-2019-1919
The CVE-2019-1919 issue affects Cisco FindIT Network Manager/FindIT Network Probe Release 1.1.4 when using Cisco-supplied VM images. A static root-level account exists in the underlying Linux OS, enabling an unauthenticated, local attacker with VM-console access to log in as root. Other releases ...
CVE-2019-1919 Cisco FindIT Network Management Software Static Credentials Vulnerability
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Cisco FindIT Network Management Software Static Credentials Vulnerability
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
CVE-2019-13297
A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a height of zero mishandle error. Applications compiled against ImageMagick libraries that accept...
CVE-2019-13295
A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a width of zero mishandle error. Applications compiled against ImageMagick libraries that accept...
CVE-2019-13299
A heap-based buffer over-read was discovered in ImageMagick in the way it applies a value with arithmetic, relational, or logical operators to an image in GetPixelChannel. Applications compiled against ImageMagick libraries that accept untrustworthy images may be vulnerable to this flaw. An...
CVE-2019-13300
A heap-based buffer overflow was discovered in ImageMagick in the way it applies a value with arithmetic, relational, or logical operators to an image due to mishandling columns. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence...
CVE-2019-13303
A heap-based buffer over-read was discovered in ImageMagick in the way it composes images. Applications compiled against ImageMagick libraries that accept untrustworthy images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the...
CVE-2019-13304
A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced assignment. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by...
CVE-2019-13305
A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced strncpy and off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could...
CVE-2019-13306
A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by...
The vulnerability of the ReadCINImage function (coders/cin.c) in the syntax analysis component of the Cineon program for reading and editing ImageMagick graphic files, which allows an attacker to cause a service failure.
The vulnerability of the ReadCINImage function coders/cin.c in the syntax analysis component of the Cineon program for reading and editing ImageMagick graphic files is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...
Moderate: Red Hat Security Advisory: openstack-tripleo-common security and bug fix update
An update for openstack-tripleo-common is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
openstack-tripleo-common: Allows running new amphorae based on arbitrary images
An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...
Outlook on the web Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability has been discovered that affects Outlook on the web formerly known as Outlook Web App on-premise deployments. To exploit this vulnerability, an attacker must send a victim an email containing custom HTML content. The victim must then drag and drop an image tha...
APSB19-37 Security update available for Adobe Bridge CC
Adobe has released a security update for Adobe Bridge CC. This update addresses a vulnerability rated important that occurs when parsing malformed SVG images. This can result in an out-of-bounds memory read which leads to information memory address disclosure in the context of current user...
D-Link DCS-1100 and D-Link DCS-1130 Cross-Site Request Forgery Vulnerabilities (CNVD-2019-23334)
The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1100 and DCS-1130. An attacker can exploit the vulnerability by sending simple UDP packets to access the management interfa...
