287 matches found
PT-2019-3039 · Microsoft · Msxml +2
Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services MSXML affected versions not specified Description: A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could...
The vulnerability of the “GCSvc.exe” service in the information protection system against unauthorized access by the Storm NT security system allows a intruder to cause a service failure.
The vulnerability of the “GCSvc.exe” service in the information protection system against unauthorized access, managed by the Storm NT security system, is related to incorrect processing of input data. Exploiting this vulnerability could allow an intruder, operating locally, to cause a service...
The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.
The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerabilities of the components GroovySandbox.java and SecureGroovyScript.java of the Jenkins Script Security plugin allow a perpetrator to execute arbitrary code.
The vulnerabilities of the GroovySandbox.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java and SecureGroovyScript.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java of the Jenkins Script Securi...
CVE-2019-0795
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793...
The vulnerability of the IndexedDB component in the Chrome web browser, allowing a hacker to gain unauthorized access to data
The vulnerability of the IndexedDB component in the Chrome web browser is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in processing input data, which can lead to corruption of the heap. Exploiting this vulnerability allows a remote attacker to trigger a service failure through a specially crafted HTML page...
The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.
The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...
The vulnerability of the AMF protocol processing mechanism in Cisco Secure ACS’s security access control system allows a perpetrator to execute arbitrary commands.
The vulnerability of the AMF processing mechanism in the Cisco Secure ACS security control system is related to deficiencies in input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted AMF message...
The vulnerability of the message filtering function of the Cisco AsyncOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco AsyncOS operating system’s message filtering function is related to insufficient processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted email message...
The vulnerability in the implementation of the Link Layer Discovery Protocol (LLDP) in Cisco FX-OS and Cisco NX-OS network operating systems allows a attacker to cause service interruptions.
The vulnerability in the implementation of the Link Layer Discovery Protocol LLDP for Cisco FX-OS and Cisco NX-OS network operating systems arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted LLD...
The vulnerability of the FortiOS operating system’s SSL-VPN implementation, caused by errors in processing input data, allows a hacker to replace encrypted traffic with malicious data.
The vulnerability of the SSL-VPN implementation in the FortiOS operating system arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to replace encrypted traffic using a specially generated MAC...
The vulnerability in the implementation of the Microsoft Server Message Block 2.0 network protocol on Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Microsoft Server Message Block 2.0 SMBv2 network protocol in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information with the help of speciall...
Intel Extreme Tuning Utility Buffer Overflow Vulnerability
Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel USA. A buffer overflow vulnerability exists in the input processing in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a denial of service to the...
.NET Framework Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a w...
The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization software allows a intruder to gain access to control resources or execute arbitrary code.
The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization solution arises from incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain access to resources or execute arbitrary codes...
OSIsoft PI JDBC Driver and PI ODBC Driver Denial of Service Vulnerabilities
OSIsoft PI JDBC Driver and PI ODBC Driver are drivers for connecting to access databases from OSIsoft, USA. A de-security vulnerability exists in OSIsoft PI JDBC Driver and PI ODBC Driver SQL Data Access Server fails to properly process input, which could be exploited by remote attackers to submi...
Multiple Remote Code Execution Vulnerabilities in Dell SonicWALL GMS Virtual Appliance
SonicWALL offers Internet security solutions for small, medium and distributed businesses. A security vulnerability exists in the Dell GMS ViewPoint GMSVP web application. The vulnerability stems from the inability to filter user data before executing commands when processing configuration input...
MGASA-2015-0257 Updated tidy package fixes security vulnerability
A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input...
Cybozu Garoon vulnerable to SQL injection
Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in processing input through API, which may result in SQL injection. Impact A user who can log in to the system may alter information stored in the database. Solution Apply the Patch Apply the appropria...