Sourcecodester Restaurant Management System Code Issue Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A code issue vulnerability exists in version 1.0 of the Sourcecodester Restaurant Management System, which arises from a failure of the program to properly process user-submitted input and can be exploited by an attack...

PT-2019-3629

Name of the Vulnerable Software and Affected Versions Windows Hyper-V Network Switch affected versions not specified Description The issue is related to errors in input processing, which can be exploited by a remote attacker using a specially crafted application to access protected information...

PT-2019-3039

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services MSXML affected versions not specified Description A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could r...

GCSvc.exe Service Unauthorized Access

The vulnerability of the “GCSvc.exe” service in the information protection system against unauthorized access, managed by the Storm NT security system, is related to incorrect processing of input data. Exploiting this vulnerability could allow an intruder, operating locally, to cause a service...

Intel Data Center Manager SDK Installation Privilege Escalation

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

GroovySandbox SecureGroovyScript Code Execution

The vulnerabilities of the GroovySandbox.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java and SecureGroovyScript.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java of the Jenkins Script Securi...

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793...

IndexedDB Component Unauthorized Data Access

The vulnerability of the IndexedDB component in the Chrome web browser is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2019-1611

Name of the Vulnerable Software and Affected Versions Microsoft Hyper-V Network Switch affected versions not specified Description The issue is related to errors in input processing, which can be exploited by an attacker to cause a denial of service using a specially crafted application. This can...

Google Chrome V8 DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in processing input data, which can lead to corruption of the heap. Exploiting this vulnerability allows a remote attacker to trigger a service failure through a specially crafted HTML page...

libsoup get_cookies Code Execution

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...

Cisco Secure ACS AMF Protocol Arbitrary Command Execution

The vulnerability of the AMF processing mechanism in the Cisco Secure ACS security control system is related to deficiencies in input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted AMF message...

Cisco AsyncOS Message Filtering DoS

The vulnerability of the Cisco AsyncOS operating system’s message filtering function is related to insufficient processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted email message...

Cisco FX-OS LLDP DoS

The vulnerability in the implementation of the Link Layer Discovery Protocol LLDP for Cisco FX-OS and Cisco NX-OS network operating systems arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted LLD...

FortiOS SSL-VPN Replacement

The vulnerability of the SSL-VPN implementation in the FortiOS operating system arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to replace encrypted traffic using a specially generated MAC...

Microsoft Server Message Block 2.0 Disclosure

The vulnerability of the Microsoft Server Message Block 2.0 SMBv2 network protocol in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information with the help of speciall...

Intel Extreme Tuning Utility Buffer Overflow Vulnerability

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel USA. A buffer overflow vulnerability exists in the input processing in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a denial of service to the...

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a w...

input data processing module Code Execution

The vulnerability of the input data processing module in Philips e-Alert Unit’s medical system visualization solution arises from incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain access to resources or execute arbitrary codes...

OSIsoft PI JDBC Driver and PI ODBC Driver Denial of Service Vulnerabilities

OSIsoft PI JDBC Driver and PI ODBC Driver are drivers for connecting to access databases from OSIsoft, USA. A de-security vulnerability exists in OSIsoft PI JDBC Driver and PI ODBC Driver SQL Data Access Server fails to properly process input, which could be exploited by remote attackers to submi...