11005 matches found
CVE-2018-16077
Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page...
PT-2019-17999 · Lenovo · Lenovo Service Bridge
Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow remote code execution. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve the issue...
PT-2019-18000 · Lenovo · Lenovo Service Bridge
Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow unencrypted downloads over FTP. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve th...
Unspecified Vulnerability in ASUS HiVivo aspplication for ASUS Watch
ASUS HiVivo aspplication for ASUS Watch is an application for ASUS smartwatch from Asus ASUS of Taiwan, China. The program focuses on monitoring heart rate and exercise track etc. through the smartwatch. A security vulnerability exists in ASUS HiVivo aspplication for ASUS Watch prior to version...
CVE-2019-12292
Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...
ZTE WF820+ LTE Outdoor CPE Cross-Site Request Forgery Vulnerability
The ZTE WF820+ LTE Outdoor CPE is an outdoor CPE Customer Premise Equipment device from ZTE China. A cross-site request forgery vulnerability exists in the ZTE WF820+ LTE Outdoor CPE UKBBWF820+1.0.0B06 prior version, which originates from a WEB application that does not adequately verify that the...
Cisco Digital Network Architecture (DNA) Center Authentication Bypass Vulnerability
Cisco DNA Center is a complete software-based network automation and assurance solution. An authentication bypass vulnerability exists in Cisco Digital Network Architecture DNA Center versions prior to 1.3. The vulnerability stems from insufficiently restricted access to ports required for system...
CVE-2019-7588
A vulnerability in the exacqVision Enterprise System Manager ESM v5.12.2 application whereby unauthorized privilege escalation can potentially be achieved. This vulnerability impacts exacqVision ESM v5.12.2 and all prior versions of ESM running on a Windows operating system. This issue does not...
Gemalto Admin Control Center Access Control Error Vulnerability
Gemalto Admin Control Center is a set of Web-based Sentinel user tools from Gemalto. The product is mainly used to query and manage hardware and software Sentinel license keys. A security vulnerability exists in Gemalto Admin Control Center versions prior to 7.92, which stems from the program's u...
PT-2019-2463 · Intel · Intel(R) Rst
Name of the Vulnerable Software and Affected Versions: IntelR RSTe versions prior to 5.5.0.2015 Description: The issue is related to a Reflected XSS in the web interface for IntelR Accelerated Storage Manager. This may allow an unauthenticated user to potentially enable denial of service via...
PT-2019-2465 · Ite Tech · Ite Tech Consumer Infrared Driver
Name of the Vulnerable Software and Affected Versions: ITE Tech Consumer Infrared Driver versions prior to 5.4.3.0 Description: The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. This...
CloudBees Jenkins Artifactory Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Artifactory Plugin is used in one of the...
CVE-2019-5242
There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write...
CVE-2019-5219
There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181C00E87R2P20T8. An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful...
CVE-2019-11080
Sitecore Experience Platform XP prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS 293863. An authenticated user with necessary permissions is able to remotely execute OS commands by sending a crafted serialized object...
HPE Intelligent Management Center (IMC) faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A faultFlashEventSelectFact expression language injection remote code execution vulnerability exists in HP...
CVE-2019-11988
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-9189
Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker t...