11017 matches found
CVE-2019-3484
Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7...
CVE-2019-1766
A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the...
WebGalamb suffers from a SQL injection vulnerability
Webgalamb is a suite of newsletter and email marketing software. A SQL injection vulnerability exists in Webgalamb 7.0 and prior versions, which stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit the vulnerability to execute...
Mozilla Firefox Same Origin Policy Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 66. An attacker can exploit the vulnerability to bypass the same-origin policy and read cross-origin images...
CVE-2018-20034
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vend...
CVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server...
UBUNTU-CVE-2019-3859
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the libssh2packetrequire and libssh2packetrequirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...
PuTTY hijacking vulnerability
PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY Windows versions prior to 0.71. A local attacker could exploit the vulnerabili...
PT-2019-4507 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.6 Description: The issue is related to the use of memory after it has been freed in the cpia2 exit function, located in drivers/media/usb/cpia2/cpia2 v4l.c. This can lead to a denial of service...
Adobe Photoshop CC Heap Corruption Vulnerability
Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. A heap corruption vulnerability exists in Photoshop CC versions prior to 19.1.7 and prior to 20.0.2 for Windows and macOS based platforms. A remote...
Private API Permissions Vulnerability in Google Chrome Extension
Chrome is a web browsing tool developed by Google. A privilege vulnerability exists in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit the vulnerability to launch the extension installation user interface via a crafted HTML page...
CVE-2019-1690
A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...
Buffer overflow
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTT...
MarcomCentral FusionPro VDP Creator Path Traversal Vulnerability
MarcomCentral FusionPro VDP Creator is a variable data publishing design and layout tool from MarcomCentral USA. A directory traversal vulnerability exists in the FPProducerInternetServer.exe service/utility in MarcomCentral FusionPro VDP Creator versions prior to 10.0. A remote attacker could us...
CVE-2018-19639
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing e.g. with CVE-2018-19638 he can execute arbitrary commands as root...
CVE-2018-19638
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files...
Dell EMC RSA Archer Information Disclosure Vulnerability (CNVD-2019-06042)
Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in Dell EMC RSA Archer...
Linux kernel CVE-2019-16994 Memory Leak Denial of Service Vulnerability
Description Linux kernel is prone to a denial-of-service vulnerability. Attackers may leverage this issue to cause a denial-of-service condition, denying service to legitimate users. Versions prior to Linux kernel 5.0 are vulnerable. Technologies Affected Linux kernel 2.6.0 Linux kernel 2.6.1 Lin...
CVE-2018-12401
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service DOS attacks. This vulnerability affects Firefox 63...