5109 matches found
Libsixel CVE-2019-20023 Memory Leak Denial of Service Vulnerability
Description Libsixel is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the application; denying service to legitimate users. Libsixel versions through 1.8.4 are vulnerable. Technologies Affected Libsixel Libsixel 1.0.0 Libsixel Libsixel 1.1.0 Libsixel...
Cloud Foundry Cloud Controller API CVE-2019-11294 Access Control Security Bypass Vulnerability
Description Cloud Foundry Cloud Controller API is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks. Cloud Foundry Cloud Controller API 1.88.0 is vulnerable...
WECON PLC Editor
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Equipment: PLC Editor Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation could allow an attacker to execute code under the privileges of the application. 3. TECHNICAL DETAILS...
RedHat Ceph CVE-2019-19337 Remote Denial of Service Vulnerability
Description RedHat Ceph is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. Technologies Affected Redhat Ceph Storage 3 Redhat Ceph Storage 3.3 Redhat Ceph Storage MON 3 Redhat Ceph Storage MON for Power 3 Redhat Ceph Stora...
Multiple Dell EMC Products CVE-2019-18588 Cross Site Scripting Vulnerability
Description Multiple Dell EMC products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Trend Micro Apex One and OfficeScan CVE-2019-19691 Information Disclosure Vulnerability
Description Trend Micro Apex One and OfficeScan are prone to an information-disclosure vulnerability. Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks. The following products are affected: Trend Micro Apex One 2019 Trend Micro OfficeScan XG...
Trend Micro Apex Central CVE-2019-19692 Cross Site Scripting Vulnerability
Description Trend Micro Apex Central is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...
Palo Alto Networks PAN-OS CVE-2019-17440 Privilege Escalation Vulnerability
Description Palo Alto Networks PAN-OS is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to obtain elevated privileges. Palo Alto Networks PAN-OS version 9.0 through and prior to 9.0.5-h3 are vulnerable. Technologies Affected Paloaltonetworks PAN-OS 9.0.0...
Multiple Moxa Products CVE-2019-19707 Denial of Service Vulnerability
Description Multiple Moxa Products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause resource exhaustion to the affected device, denying service to legitimate users. Technologies Affected Moxa EDS-G508E Series 6 Moxa EDS-G512E Series 6 Moxa EDS-G51...
Telos AMHS Multiple Cross Site Scripting and Information Disclosure Vulnerabilities
Description Telos AMHS is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability. An attacker may leverage these issues to obtain sensitive information or execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...
IBM Cognos Analytics Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
Description IBM Cognos Analytics is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based...
IBM Financial Transaction Manager for SWIFT Services Multiple Security Vulnerabilities
Description IBM Financial Transaction Manager for SWIFT Services is prone to the following security vulnerabilities: 1. A clickjacking vulnerability 2. A cross-site scripting vulnerability 3. An information-disclosure vulnerability 4. A cross-site request-forgery vulnerability An attacker can...
PHP CVE-2019-11049 Remote Denial Of Service Vulnerability
Description PHP is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service condition. Technologies Affected PHP PHP 7.0 PHP PHP 7.0.0 PHP PHP 7.0.1 PHP PHP 7.0.10 PHP PHP 7.0.11 PHP PHP 7.0.12 PHP PHP 7.0.13 PHP PHP 7.0.14 PHP PHP 7.0.15 PH...
Sysstat CVE-2019-19725 Memory Corruption Vulnerability
Description Sysstat is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. sysstat versions through 12.2.0 are vulnerable. Technologies...
Django CVE-2019-19844 Security Bypass Vulnerability
Description Django is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Djangoproject Django 1.11 Djangoproject Django 1.11.1 Djangoproject...
SQLite CVE-2019-19880 Denial of Service Vulnerability
Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...
PHP CVE-2019-11046 Buffer Underflow Vulnerability
Description PHP is prone to a buffer-underflow vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed. PHP 7.2.x versions prior to 7.2.26, 7.3.x versions pri...
PHP PEAR 'Archive_Tar' Multiple Security Vulnerabilities
Description PEAR ArchiveTar is prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the application, obtain sensitive information, bypass certain security restrictions and perform unauthorized actions. PEAR ArchiveTar version...
Apache Log4j CVE-2019-17571 Deserialization Remote Code Execution Vulnerability
Description Apache Log4j is prone to remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Apache Log4j versions through 1.2.17 are...
PHP CVE-2019-11045 Multiple Unspecified Security Vulnerabilities
Description PHP is prone to multiple unspecified security vulnerabilities. An attacker can exploit these issues to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. PHP 7.2.0 through 7.2.26, 7.3.0 through 7.3.12 and 7.4.0 are...