CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-11175

Insufficient input validation in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-11137

Insufficient input validation in system firmware for IntelR XeonR Scalable Processors, IntelR XeonR Processors D Family, IntelR XeonR Processors E5 v4 Family, IntelR XeonR Processors E7 v4 Family and IntelR AtomR processor C Series may allow a privileged user to potentially enable escalation of...

CVE-2019-11179

Insufficient input validation in IntelR Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access...

The vulnerability of the ReadMetaFromId3v2 function in the Media Player software VideoLAN VLC, which allows a hacker to cause a service failure

The vulnerability of the ReadMetaFromId3v2 function in the VideoLAN VLC media player’s code exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause downtime or service failures using the MySQL Protocol...

Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability (cisco-sa-20191016-tele-ce-cmdinj)

According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE Cisco TelePresence Software is affected by a command injection vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this by authenticating as an...

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause downtime or service failures through the use of MySQL network protocols...

CVE-2019-15281 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The attacker must have...

PT-2019-3519

Name of the Vulnerable Software and Affected Versions Sudo versions prior to 1.8.28 Description The issue allows an attacker with access to a Runas ALL sudoer account to bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user...

Cisco IOS XE Software Stored XSS (cisco-sa-20190925-xss)

According to its self-reported version, Cisco IOS XE Software is affected by a stored cross-site scripting XSS vulnerability in its web framework code. This allows an unauthenticated, remote attacker to conduct stored XSS attacks against a user of the web interface of the affected software. The...

PT-2019-3528 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient input validation in the web-based management interface of the software. This could allow a remote attacker to...

PT-2019-3388 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient input validation in the web UI of the Cisco Firepower Management Center, which could allow a remote attacker to execute...

Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some...

PT-2019-4390 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue exists due to insufficient input validation in the application, allowing a remote attacker to delete a sub-domain from a user's account. This can be achieved by an attacker using their...

The vulnerability of the Microsoft Outlook iOS client stems from insufficient validation of input data. This allows attackers to execute cross-site scripting attacks and compromise the integrity of the protected information.

The vulnerability of the Microsoft Outlook iOS client exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks and compromise the integrity of protected information...

Cisco IOS XE Software Command Injection Vulnerability

According to its self-reported version, the Cisco IOS XE Software is affected by a vulnerability that allows an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges. The vulnerability is due to insufficient input validation of commands supplied by...

PT-2019-2970 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A remote code execution issue exists due to insufficient input validation in the Windows Hyper-V Network Switch. This allows a remote attacker, acting as an authenticated user on a...

RHEL 7 : kernel (RHSA-2019:1873)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1873 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfs: use-after-free in...