5116 matches found
F5 SSL Orchestrator CVE-2019-6674 Denial of Service Vulnerability
Description F5 SSL Orchestrator is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial of service conditions. Technologies Affected F5 SSL Orchestrator 14.1.0 F5 SSL Orchestrator 14.1.2 F5 SSL Orchestrator 15.0.0 F5 SSL Orchestrator 15.0.1 Recommendation...
Linux Kernel CVE-2019-10220 Directory Traversal Vulnerability
Description Linux Kernel is prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to access, write or execute arbitrary files. Linux kernel version 4.9.0 is vulnerable. Technologies Affected Linux kernel 4.9.0 Recommendations...
Multiple F5 Products CVE-2019-6665 Man in the Middle Security Bypass Vulnerability
Description Multiple F5 Products are prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. The following products are vulnerable: BIG-IP ASM 15.0.0 throu...
Multiple F5 BIG-IP Products CVE-2019-6673 Denial of Service Vulnerability
Description Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a denial of service condition. Technologies Affected F5 BIG-IP AAM 14.1.0 F5 BIG-IP AAM 14.1.0.1 F5 BIG-IP AAM 14.1.0.2 F5 BIG-IP AAM 14.1.0.5 F5 BIG-IP AAM 14.1.0.6 F...
Node.js 'lodahs' Package CVE-2019-19771 Unspecified Security Vulnerability
Description The 'lodahs' Package for Node.js is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Node.js lodahs version 1.0.0 is vulnerable Technologies Affected Node...
Multiple F5 BIG-IP Products CVE-2019-6666 Denial of Service Vulnerability
Description Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a denial of service condition. Technologies Affected F5 BIG-IP AAM 13.0.0 F5 BIG-IP AAM 13.1.1 F5 BIG-IP AAM 14.0.0 F5 BIG-IP AAM 14.1.0 F5 BIG-IP AAM 15.0.0 F5 BIG-IP...
Multiple Dell Products DSA-2019-164 Multiple Security Vulnerabilities
Description Multiple Dell products are prone to the following vulnerabilities: 1. A cross-site scripting vulnerability 2. An authentication-bypass vulnerability 3. A session fixation vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of the victim...
FreeIPA CVE-2019-14867 Denial of Service Vulnerability
Description FreeIPA is prone to a denial-of-service vulnerability. Attackers can exploit this issue to execute arbitrary code or crash the affected application, denying service to legitimate users. FreeIPA versions 4.6 prior to 4.6.7, versions 4.7 prior to 4.7.4 and versions 4.8 prior to 4.8.3 ar...
ABB Relion 650 and 670 Series CVE-2019-18247 Denial Of Service Vulnerability
Description ABB Relion 650 and 670 Series are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a device to reboot, denying service to legitimate users. The following versions of ABB Relion series are vulnerable: ABB Relion 650 series versions 1.3.0.5 and prior...
IBM Sterling B2B Integrator CVE-2019-4387 SQL Injection Vulnerability
Description IBM Sterling B2B Integrator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
Kaspersky Protection extension for Google Chrome CVE-2019-15684 Unauthorized Access Vulnerability
Description Kaspersky Protection extension for Google Chrome is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. Kaspersky Protection extension for Google Chrome versions...
Fortinet FortiGate CVE-2019-6697 HTML Injection Vulnerability
Description Fortinet FortiGate is prone to an HTML injection vulnerability because it fails to sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based...
Symantec Critical System Protection CVE-2019-18374 Unspecified Authentication Bypass Vulnerability
Description Symantec Critical System Protection is prone to an unspecified authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks. Symantec Critical System Protection CSP...
Dell EMC RSA Authentication Manager CVE-2019-18574 HTML Injection Vulnerability
Description Dell EMC RSA Authentication Manager is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based...
Multiple Kaspersky Products Multiple Security Vulnerabilities
Description Multiple Kaspersky Products are prone to the following security vulnerabilities: 1. Multiple arbitrary command-execution vulnerabilities 2. An information-disclosure vulnerability 3. A security-bypass vulnerability An attacker can exploit these issues to execute arbitrary commands,...
Siemens Polarion Multiple Cross Site Scripting and HTML Injection Vulnerabilities
Description Siemens Polarion is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based...
Multiple QNAP Products NAS-201911-25 Multiple Security Vulnerabilities
Description Multiple QNAP products are prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access to the affected device, inject and execute arbitrary code and read or write arbitrary files on the device. Technologies Affected Qnap Photo Station...
DotNetNuke Unauthorized Access Vulnerability
Description DotNetNuke is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. DotNetNuke versions 7.0.0 through 9.3.2 are vulnerable. Technologies Affected DotNetNuke...
Pivotal RabbitMQ CVE-2019-11287 Remote Denial of Service Vulnerability
Description Pivotal RabbitMQ is prone to a remote denial-of-service vulnerability because it fails to sufficiently bounds check user supplied data. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Technologies Affected Pivotal RabbitMQ for P...
Dell EMC SMR CVE-2019-18580 Deserialization Remote Code Execution Vulnerability
Description Dell EMC Storage Monitoring and Reporting SMR is prone to a remote-code execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Dell...