PT-2019-16981 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.0 through 11.1 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations: For...

SonicWall SMA100 Code Injection Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A code injection vulnerability exists in SonicWall SMA100 version 9.0.0.4 and earlier. The vulnerability stems from the failure of a network system or product to properly filter specific elements of externally input dat...

ZOHO ManageEngine EventLog Analyzer Access Control Error Vulnerability

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. The software is capable of network-wide hosts, servers, network equipment and a variety of application service systems and other logs generated by the comprehensive collecti...

PT-2019-15950 · Zoho · Zoho Manageengine Eventlog Analyzer

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine EventLog Analyzer versions 10.0 SP1 before Build 12110 Description: An issue was discovered that allows bypassing security restrictions, enabling the recovery of MD5 hashes of accounts used to authenticate the ManageEngine...

CVE-2019-19707

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...

Apache Olingo XXE Vulnerability

Apache Olingo is a Java library that implements the Open Data Protocol OData. An XXE vulnerability exists in Apache Olingo 4.0.0 - 4.6.0, which is caused by not configuring the XML content-type entity deserializer in Olingo to deny parsing of external entities, and can be exploited to conduct an...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

CVE-2019-18374

Symantec Critical System Protection CSP, versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls...

Cisco DNA Spaces:Connector SQL Injection Vulnerability

Cisco DNA Spaces is a set of indoor location services platform from Cisco.Cisco DNA Spaces:Connector is one of the connectors used to support the communication of Cisco wireless controllers. A SQL injection vulnerability exists in the Web UI in versions prior to Cisco DNA Spaces: Connector 2.0 th...

Intel Ethernet 700 Series Controllers Denial of Service Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A denial of service vulnerability exists in Intel Ethernet 700 Series Controllers versions prior to 7.0. The vulnerability stems from insufficient input validation in the controller's i40e driver. An attacker could...

Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An Insufficient Access Control vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to cause a denial of service...

Intel Ethernet 700 Series Controllers Buffer Overflow Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A buffer overflow vulnerability exists in the i40e driver for Intel Ethernet 700 Series Controllers versions prior to 7.0. An attacker could exploit this vulnerability to achieve elevation of privilege...

SQL Injection Vulnerability in Qixing Quote System V2.0 da***.aspx Page (CNVD-2019-45198)

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

OpenEMR SQL Injection Vulnerability (CNVD-2019-43374)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in OpenEMR 5.0.2 and prior versions. The...

Unauthorized Access Vulnerability in Profile 30.0 of Qixing Filing System (CNVD-2020-00011)

Qixing File System Profile 30.0 is a system for managing employee files, contracts, training, personnel, attendance, payroll and other information within an organization. Kaixing File System Profile 30.0 suffers from an unauthorized access vulnerability, which can be exploited by attackers to...

Cryptocat Input Validation Error Vulnerability (CNVD-2019-40145)

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in versions of Cryptocat prior to 2.0.22. An attacker can exploit this vulnerability to cause the application to generate invalid HTML code...

mysql: C API unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

Cisco Video Communications Server Command Injection Vulnerability

Cisco Video Communications Server VCS is a video communications server for videoconferencing solutions from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco VCS X versions prior to 7.0.3, which stems from the possibility that the program may fail to properly handle...

IBM OpenPages GRC Platform Information Disclosure Vulnerability (CNVD-2019-39354)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

Unspecified Vulnerability in IBM Security Guardium Big Data Intelligence

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...