CVE-2019-8293

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution...

Design/Logic Flaw

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that targets a FastL4 virtual server VIP on VIP, hardware appliances may stop responding...

PT-2019-18970

Name of the Vulnerable Software and Affected Versions upload-image-with-ajax version 1.0 Description A logic error in the code allows arbitrary files to be uploaded to the web root, enabling code execution. Recommendations For upload-image-with-ajax version 1.0, consider disabling the file upload...

Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass (cisco-sa-20180926-macsec)

According to its self-reported version, Cisco IOS XE Software is affected by an authentication bypass vulnerability in the MACsec Key Agreement MKA using Extensible Authentication Protocol-Transport Layer Security EAP-TLS functionality due to a logic error. An unauthenticated, adjacent attacker c...

Intel PROSet/Wireless WiFi Software Logic Error Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A logic error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which can be exploited by a local attacker to elevate privileges, cause a denial of service, and disclose...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

OpenBSD 6.6 vulnerability CVE-2019-19519: a logic error in su.c enables a local user to use su -L to login with another user’s login class, enabling local privilege escalation. Affected software is OpenBSD 6.6; the flaw resides in the main function of su/su.c. Consequences include bypassing inten...

PT-2019-15864

Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description A logic error in the main function in su/su.c allows local users to achieve any login class, often excluding root, by using the su -L option. Recommendations For OpenBSD version 6.6, at the moment, there is no...

CVE-2019-19519: Improper Authentication

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

Cisco IOS XE Software with Cisco Umbrella Integration DoS (cisco-sa-20180328-opendns-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Cisco Umbrella Integration feature due to a logic error that exists when handling a malformed incoming packet, leading to access to an internal data structure after it has bee...

CVE-2019-2233

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not...

CVE-2019-2233

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not...

CVE-2019-2233

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not...

PT-2019-16314

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a logic error in the getUserCount and getCount methods of UserSwitcherController.java. This error could allow for the creation of new users, potentially leading to local escalatio...

CVE-2019-2233: Undefined Security Weakness

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Rockwellautomation Rslinx Integer Overflow or Wraparound

Rockwell Automation RSLinx Enterprise Software LogReceiver.exe CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “End of Current Record” field. By sending a...