Huawei mobile phone software DoS

The vulnerability of Huawei’s mobile phone software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Desigo PX Web Service DoS

The vulnerability of the microprogramming software for Desigo PX is related to incorrect verification of input data by the PX Web service port TCP/80. Exploiting this vulnerability can allow an attacker to cause service failures...

SAP Financial Consolidation XSS

The vulnerability of the SAP Financial Consolidation web application is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

SAP Customer Relationship Management XSS

The vulnerability of the SAP Customer Relationship Management software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Security Bulletin: Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package

Summary Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package Vulnerability Details CVEID: CVE-2019-0205 DESCRIPTION: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue...

Intel Graphics Driver DoS

The vulnerability of the Intel Graphics Driver’s API driver component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Mutt Code Execution

The vulnerability of Mutt and NeoMutt email clients is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Active Management Technology Buffer Overflow Privilege Escalation

The vulnerability of Microprogramming Software under Intel Active Management Technology exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

Intel BMC Insufficient Validation DoS

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

Ghostscript Code Execution

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Intel Active Management Technology Disclosure

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Information Disclosure

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

Information Disclosure

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2019-5958

Name of the Vulnerable Software and Affected Versions Andover Continuum versions 9680, 5740, 5720, bCX4040, bCX9640, 9900, 9940, 9924, and 9702 Description The issue is related to the lack of input data sanitization, which can lead to Cross-site Scripting XSS attacks. This could allow a remote...

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

DEBIAN-CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

Design/Logic Flaw

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...