6723 matches found
CVE-2019-5397
A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
Session fixation
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5395
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
SUSE-SU-2019:2032-1 Security update for subversion
This update for subversion fixes the following issues: Security issues fixed: - CVE-2018-11782: Fixed a remote denial of service in svnserve 'get-deleted-rev' bsc1142743. - CVE-2019-0203: Fixed a remote, unauthenticated denial of service in svnserve bsc1142721. Non-security issues fixed: - Add...
CVE-2019-2841
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low...
Mozilla Firefox Input Validation Error Vulnerability (CNVD-2019-29579)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 68. A remote attacker can exploit this vulnerability to bypass security restrictions and scan all TCP ports on any host using the...
EDK2 Security Bypass Vulnerability
EDK2 is a set of cross-platform firmware development environment based on UEFI and PI specifications. A security bypass vulnerability exists in EDK2. A remote attacker could exploit this vulnerability to cause an affected application to crash, resulting in a denial of service or bypass security...
Oracle Communications Billing and Revenue Management CVE-2019-12086 Remote Security Vulnerability
Description Oracle Communications Billing and Revenue Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Billing Care' and 'Business Operations Center jackson-databind' components are affected. This vulnerability affects the...
Red Hat JBoss Application Server (AS) Console and Web Management Misconfiguration Vulnerability - Active Check
The default configuration of Red Hat JBoss Application Server AS does not restrict access to the console and web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests. SPDX-FileCopyrightText: 2019 Greenbone AG Some text...
Microsoft Edge Chakra Scripting Engine CVE-2019-1103 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
HPESBMU03941 rev.1 - HPE IceWall SSO Agent Option and IceWall MFA Remote Denial of Service
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Agent Option 10.0 RHEL, HP-UX, Windows and 11.0 RHEL HPE IceWall MFA 4.0EE MFA. Server LTU MFA Proxy - Agent module only included in MFA Proxy HPE IceWall.MFA4.0SE...
Cisco Email Security Appliance AsyncOS Software Remote Security Bypass Vulnerability
Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. A remote security bypass vulnerability exists in the GZIP decompression engine of AsyncOS Software in the Cisco ESA, which stems from the program...
Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24756)
Internet Explorer, is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer and Windows Internet Explorer abbreviated as IE. A remote memory corruption vulnerability exists in Microsoft Internet Explorer Scripting Engine, which can be exploited by an attacker to execute...
CVE-2018-10692
An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily...
OnApp CVE-2019-12491 Command Execution Vulnerability
Description OnApp is prone to a remote command-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected server. OnApp versions 5.0 prior to 5.0.0-88, 5.1 through 5.4, 5.5 prior to 5.5.0-93,...
fence-agents remote denial of service vulnerability
fence-agents is an agent program that supports remote power management of clustered devices. A denial of service vulnerability exists in versions of fence-agents prior to 4.3.4. An attacker can exploit this vulnerability to cause a denial of service...
Buffer overflow
A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...
Cross site scripting
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...
