284 matches found
CVE-2016-10829: Files or Directories Accessible to External Parties
cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error SEC-99...
Precision Time Protocol DoS
The vulnerability of the Precision Time Protocol PTP implementation in the Cisco IOS operating system is related to errors in processing PTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted PTP packets...
Internet Explorer URL Processing Redirect
The vulnerability of the Internet Explorer browser is related to errors in processing URL addresses. Exploiting this vulnerability can allow a malicious actor to redirect users to a malicious website using a specially crafted web page...
CVE-2019-1858
A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly...
Denial Of Service (DoS)
Microsoft .NET Framework is vulnerable to denial of serviceDoS attacks. A remote user could send specially crafted requests to the target .NET web application to trigger a request processing error in the Microsoft Common Object Runtime Library and cause denial of service conditions which leads...
Windows Contacts Code Execution
The vulnerability of the “Windows Contacts” component in Windows operating systems is related to errors in processing VCF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a VCF file with a specially crafted value for the “URL” field...
JunOS Routing Protocols Daemon DoS
The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...
Junos DoS
The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...
Microsoft Outlook Default Link Type Access
The vulnerability of the Microsoft Outlook email client is related to a processing error in the “Default Link Type” setting. Exploiting this vulnerability can allow an attacker to gain access to protected information through a file attached to messages...
PowerShell Code Execution
The vulnerability of the PowerShell command interpreter for Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
Microsoft Edge Spoofing Vulnerability (CNVD-2019-02771)
Microsoft Windows 10 and others are operating systems released by Microsoft Corporation USA.Edge is one of the default browsers that comes with the system. A spoofing vulnerability exists in Microsoft Edge that stems from the program's failure to properly process HTML content. A remote attacker c...
Microsoft Server Message Block 2.0 Disclosure
The vulnerability of the Microsoft Server Message Block 2.0 SMBv2 network protocol in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information with the help of speciall...
Internet Explorer XSS
The vulnerability of the Internet Explorer browser security function arises due to errors in script processing. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially crafted web page...
Windows kernel Code Execution
The vulnerability of the Windows operating system’s kernel is related to errors in processing objects in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created application...
Microsoft InfoPath Code Execution
The vulnerability of the form development tool for input data based on XML is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
Design/Logic Flaw
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLOS that needs to be authenticated using HMAC and then processed. However, some of the processing...
PostgreSQL Information Disclosure Vulnerability-01 (Feb 2018) - Windows
PostgreSQL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-12318
A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...
CVE-2017-12318
A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...
Cisco RF Gateway 1 TCP Connection Denial of Service Vulnerability
A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...