CVE-2019-11408

FusionPBX 4.4.3 is affected by CVE-2019-11408 (XSS) in the Operator Panel’s app/operator_panel/index_inc.php. An unauthenticated attacker can inject JavaScript by crafting the Caller ID/From field during a call, which is stated to chain into remote code execution via a second vulnerability (CVE-2...

CVE-2019-3723

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...

CVE-2019-3722

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...

CVE-2019-3723: Improper Input Validation

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...

CVE-2018-8047: Improper Neutralization of Input During Web Page Generation

vtiger CRM 7.0.1 is affected by one reflected Cross-Site Scripting XSS vulnerability affecting version 7.0.1 and probably prior versions. This vulnerability could allow remote unauthenticated attackers to inject arbitrary web script or HTML via index.php?module=Contacts&view=List app parameter...

CVE-2019-3722: Improper Restriction of XML External Entity Reference

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...

Denial Of Service (DoS)

Thunderbird, Firefox ESR and Firefox are vulnerable to denial of service attacks. A remote unauthenticated attacker could cause out-of-bounds memory read error during QCMS color profile transformations via QCMS Color Profile Transformation component...

Denial Of Service (DoS)

Thunderbird ESR and Thunderbird are vulnerable to denial of service attacks. A remote unauthenticated attacker can create an email message with specially crafted message headers that, when received by the target user, will cause a Thunderbird process to hang. This vulnerability affects the...

Information Disclosure

Firefox ESR and Firefox are vulnerable to information disclosure. A remote unauthenticated user can send a specially crafted request to view potentially sensitive information on the target system. The Fetch API component is affected...

Denial Of Service (DoS)

Thunderbird, Firefox ESR and Firefox are vulnerable to denial of service attacks. A remote unauthenticated user could crash the application by manipulating the SVG "animatedPathSegList" through script...

Sandbox Restrictions Bypass

Thunderbird, Firefox ESR and Firefox are vulnerable to sandbox restrictions bypass. A remote unauthenticated user could cause memory corruption in the parent process due to the lack of parameter validation on IPC messages resulting in a system hang...

CVE-2019-3725 Command Injection vulnerability

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrar...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2020-20378)

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core...

Microsoft .NET Core and Microsoft ASP.NET Core Denial of Service Vulnerabilities

Microsoft .NET Core and Microsoft ASP.NET Core are both products of Microsoft Corporation USA. NET Core is a free open source development platform. NET Core is a free open source development platform with multi-language support and cross-platform features.Microsoft ASP.NET Core is a framework of...

CVE-2019-3725: Improper Neutralization of Special Elements used in an OS Command

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrar...

DoorGets Sensitive Information Disclosure Vulnerability (CNVD-2019-13791)

DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /fileman/php/movefile.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain sensitive information about the server or make the server...

DoorGets Sensitive Information Disclosure Vulnerability (CNVD-2019-13788)

DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /fileman/php/copyfile.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain sensitive information about the server...

DoorGets Sensitive Information Disclosure Vulnerability

DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /setup/temp/admin.php and /setup/temp/database.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain the administrator password...

PT-2019-2118 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the implementation of the Lightweight Directory Access Protoc...

CVE-2019-3930

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...