CVE-2019-12688: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

CVE-2019-12687: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

PT-2019-3388 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient input validation in the web UI of the Cisco Firepower Management Center, which could allow a remote attacker to execute...

Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some...

PT-2019-4019

Name of the Vulnerable Software and Affected Versions Открытый регион affected versions not specified Description The issue is due to insufficient input validation, which can be exploited by a remote attacker to execute arbitrary code or conduct a cross-site scripting attack. This can be achieved...

PT-2019-4127

Name of the Vulnerable Software and Affected Versions Dino before 2019-09-10 Description The issue is related to insufficient input validation in the module/xep/0313 message archive management.vala module of the Dino instant messaging client. This could allow a remote attacker to impact data...

PT-2019-4128

Name of the Vulnerable Software and Affected Versions Dino before 2019-09-10 Description The issue is related to insufficient input validation in the /roster/module.vala module of the Dino instant messaging client. This can potentially allow a remote attacker to impact data integrity...

PT-2019-4129

Name of the Vulnerable Software and Affected Versions Dino before 2019-09-10 Description The issue is related to insufficient input validation in the /xep/0280 message carbons.vala module of the Dino instant messaging client. This could allow a remote attacker to impact data integrity. The proble...

PT-2019-3360

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description A remote code execution issue exists...

PT-2019-5006

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue concerns a UI spoofing problem in Chromium, which is part of Google Chrome. It allows a remote attacker to spoof notifications by using a crafted HTML page. The vulnerability i...

PT-2019-4390 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue exists due to insufficient input validation in the application, allowing a remote attacker to delete a sub-domain from a user's account. This can be achieved by an attacker using their...

PT-2019-4338

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services versions prior to 1.0.118 Description The issue is related to insufficient input validation in the SAP HANA Extended Application Services development tool. This can be exploited by an attacker to gain...

PT-2019-3354

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2019-3173

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2019-3361

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description A remote code execution issue exists...

PT-2019-3206

Name of the Vulnerable Software and Affected Versions Windows Text Service Framework affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Text Service Framework TSF due to insufficient validation of input or commands received b...

PT-2019-6358

Name of the Vulnerable Software and Affected Versions axodraw2 versions prior to 2.1.1b axohelp version prior to 1.3 Description The issue is related to insufficient input validation in the axodraw2 component of the TeX Live system. This allows a remote attacker to access confidential data,...

PT-2019-3085

Name of the Vulnerable Software and Affected Versions CE Remote Display affected versions not specified Description The issue exists due to insufficient input validation in the software. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...

The vulnerability of the Microsoft Outlook iOS client stems from insufficient validation of input data. This allows attackers to execute cross-site scripting attacks and compromise the integrity of the protected information.

The vulnerability of the Microsoft Outlook iOS client exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks and compromise the integrity of protected information...

PT-2019-4439

Name of the Vulnerable Software and Affected Versions Apache Santuario XML Security for Java versions 2.0.3 through 2.1.3 Description The issue is related to a caching mechanism introduced in version 2.0.3 of Apache Santuario XML Security for Java, which can lead to potential security flaws when...