5109 matches found
Google Android Kernel Component CVE-2020-0009 Local Privilege Escalation Vulnerability
Description Google Android is prone to a local privilege escalation vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of a privileged process. This issue is being tracked by Android Bug ID A-142938932. Technologies Affected Google Android Recommendations...
Google Android Media Framework CVE-2020-0002 Multiple Remote Code Execution Vulnerabilities
Description Google Android is prone to multiple remote code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues are being tracked by Android Bug ID...
Cisco Data Center Network Manager Multiple Directory Traversal Vulnerabilities
Description Cisco Data Center Network Manager is prone to a multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve arbitrary files from th...
Cisco Data Center Network Manager XML External Entity Information Disclosure Vulnerability
Description Cisco Data Center Network Manager is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. This issue is being tracked by Cisco bug IDs CSCvr79188, CSCvr88730 and CSCvr88737. Cisco...
Cisco Data Center Network Manager Multiple Command Injection Vulnerabilities
Description Cisco Data Center Network Manager is prone to multiple command-injection vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary command on the underlying device with root privileges. These issues are being tracked by Cisco Bug IDs CSCvr44798,...
Cisco Data Center Network Manager Multiple SQL Injection Vulnerabilities
Description Cisco Data Center Network Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data or...
Cisco Data Center Network Manager CVE-2019-15999 Unauthorized Access Vulnerability
Description Cisco Data Center Network Manager is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvs00139. Technologies...
Microsoft Windows '.Group' File Handling Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows Recommendatio...
Libsixel CVE-2019-20205 Integer Overflow Vulnerability
Description Libsixel is prone to an integer overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Libsixel versions through 1.8.4 are vulnerable...
GitLab Multiple Security Vulnerabilities
Description GitLab is prone to multiple security vulnerabilities. An attacker can exploit these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. GitLab versions prior to 11.4.13, 11.5.x prior to 11.5.6, and 11.6.x prior to 11.6.1 are...
Apache Solr CVE-2019-17558 Remote Code Execution Vulnerability
Description Apache Solr is prone to a remote-code execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Apache Solr versions prior 5.0.0 throug...
GNU LibreDWG Multiple Security Vulnerabilities
Description GNU LibreDWG is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Due to the nature of these issues, code execution may be possible but this has not been confirmed. Versions prior to GNU LibreDWG 0.9.3 are vulnerable...
Microsoft Exchange Server '/Autodiscover' Server Side Request Forgery Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Microsoft Exchange Server 2013 Cumulative Update 22 and prior versions are...
Reliable Controls MACH-ProWebCom/Sys CVE-2019-18249 Cross Site Scripting Vulnerability
Description Reliable Controls MACH-ProWebCom/Sys are prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
WordPress GDPR Cookie Compliance Plugin Multiple Security Vulnerabilities
Description The GDPR Cookie Compliance plugin for WordPress is prone to an unauthorized-access and a cross-site request-forgery vulnerability. An attacker can exploit these issues to perform certain unauthorized actions and gain unauthorized access. This may lead to further attacks. GDPR Cookie...
WordPress bbPress Members Only Plugin Cross Site Request Forgery Vulnerability
Description The 'bbPress Members Only' Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. The 'bbPress Members Only'...
GNU LibreDWG Multiple Security Vulnerabilities
Description GNU LibreDWG is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Due to the nature of these issues, code execution may be possible but this has not been confirmed. Versions prior to GNU LibreDWG 0.9.3 are vulnerable...
D-Link DIR-601 CVE-2019-16327 Authentication Bypass Vulnerability
Description D-Link DIR-601 is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks. D-Link DIR-601 Router 2.00NA is vulnerable; other versions may also be affected...
D-Link DIR-601 B1 CVE-2019-16326 Cross Site Request Forgery Vulnerability
Description D-Link DIR-601 B1 is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. D-Link DIR-601 B1 2.00NA is vulnerable; other versions may...
SQLite CVE-2019-19926 Incomplete Fix Denial of Service Vulnerability
Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...