Xen Denial of Service Vulnerability (CNVD-2019-34767)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 PV client OS attackers to cause a denial of service...

Xen Denial of Service Vulnerability (CNVD-2019-34759)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 PV client OS attackers to cause a denial of service...

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

The vulnerability of the Windows AppX Deployment Server component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to errors in connection handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to execute a cross-site scripting attack.

The vulnerability of Active Directory Federation Services ADFS on Windows operating systems is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request...

Critical Exim Flaw Opens Servers to Remote Code Execution

A patch has been issued for a critical flaw in the Exim email server software, which could potentially open Exim-based servers up to denial of service or remote code execution attacks. Exim, which is free software used on Unix-like operating systems including Linux or Mac OSX, serves as a mail...

CVE-2019-11751

Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue...

The vulnerability of the Windows Text Service Framework component in operating systems Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows Text Service Framework component in operating systems exists due to insufficient checks on the input data at the TSF server. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Update for Adobe Flash Player: September 10, 2019

None None...

PT-2019-3296 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Server affected versions not specified Description: The issue is related to errors in connection handling within the Windows AppX Deployment Server component of Windows operating systems. It allows an attacker to...

Design/Logic Flaw

A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An...

CVE-2019-1939 Cisco Webex Teams Logging Feature Command Execution Vulnerability

A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An...

CVE-2019-10988

In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thus, any unmitigated vulnerability in the old operating system could be exploit...

Fedora Update for cups FEDORA-2019-f3ef4d22db

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for cups FEDORA-2019-d9a2c03662

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2019-8683

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...

CentOS 7 : openssh (CESA-2019:2143)

An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Philips HDI 4000 Ultrasound

1. EXECUTIVE SUMMARY CVSS v3 3.0 ATTENTION: Public exploits are available/exploitable from within the same local subnet Vendor: Philips Equipment: HDI 4000 Ultrasound Systems Vulnerability: Use of Obsolete Function 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to...