The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by using a created domain name...

The vulnerability of the microprogramming software for Siemens SIMATIC S7-1500 CPU Family programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

The vulnerability of the microprogramming software for Siemens Simatic SIMATIC S7-1500 CPU Family allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

The vulnerability of the SINAMICS PERFECT HARMONY GH180 driver software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the device.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the device...

The vulnerability of the Security Audit Log of the SAP HANA database management system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Security Audit Log of the SAP HANA database management system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the LDAP server component in Samba’s network communication software allows a hacker to induce a service failure.

The vulnerability of the Samba network communication component’s LDAP server is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

HomeAutomation 3.3.2 Open Redirect

HomeAutomation v3.3.2 Open Redirect Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Summary: HomeAutomation is an open-source web interface and scheduling solution. It was initially made for use with the Telldus TellStick, but is now...

The vulnerability of the EFI_BOOT_SERVICES component of Hewlett-Packard Development Company L.P.’s desktop workstations, personal computers, and cash registers allows a hacker to exploit their privileges.

The vulnerability of the EFIBOOTSERVICES component in microprogramming software for desktop workstations, personal computers, and payment devices of Hewlett-Packard Development Company L.P exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote...

The vulnerability of the Wi-Fi WPA Supplicant component allows a intruder to trigger a service failure.

The vulnerability of the Wi-Fi WPA Supplicant component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure...

The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project allows a hacker to gain unauthorized access to information or cause service failures.

The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service failures...

The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project allows a malicious actor to gain unauthorized access to information or cause service failures.

The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

The vulnerability of the p256-ECDH key generation function in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the p256-ECDH key generation function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface for managing Cisco Prime Infrastructure network equipment is related to insufficient verification of the data entered by users in several sections of the web interface. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain...

The vulnerability of the library component (.dll) of the Advantech WebAccess monitoring software allows a perpetrator to delete any file they desire.

The vulnerability of the library component .dll of the Advantech WebAccess monitoring software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to delete any file remotely...

CVE-2019-17455

A flaw was found in the libntlm NTLM library where it was vulnerable to a buffer overflow in the buildSmbNtlmAuthRequestuserlen function. If an application using this library does not check input length before calling the function, an attacker could use this flaw to send a specially crafted reque...

The vulnerability of the srxpfe process in the JunOS operating system allows a intruder to trigger a service failure on the Juniper SRX1500 network interface.

The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of the Cisco Firepower Management Center FMC software management system exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote...