12616 matches found
Security Advisory - Information Leak Vulnerability in Huawei CloudUSM-EUA Product
There is an information leak vulnerability in Huawei CloudUSM-EUA product. Due to improper configuration, the attacker may cause information leak by successful exploitation. Vulnerability ID: HWPSIRT-2019-09106 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID:...
Lenovo Power Management Driver CVE-2019-6192 Local Buffer Overflow Vulnerability
Description Lenovo Power Management Driver is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to cause denial of service conditions. Due to the natur...
Intel Administrative Tools for Network Adapters Local Privilege Escalation Vulnerability
Description Intel Administrative Tools for Network Adapters is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Versions prior to Intel Administrative Tools for Network Adapters 24.3 are vulnerable. Technologies Affected Int...
Adobe Photoshop CC APSB19-56 Multiple Unspecified Memory Corruption Vulnerabilities
Description Adobe Photoshop CC is prone to multiple unspecified memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...
Microsoft Git for Visual Studio CVE-2019-1352 Remote Code Execution Vulnerability
Description Microsoft Git for Visual Studio is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...
Electronic Logbook Multiple Cross Site Scripting Vulnerabilities
Description Electronic Logbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Th...
MGASA-2019-0357 Updated phpmyadmin packages fix security vulnerability
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/ table name can be used to trigger a SQL injection attack through the designer feature CVE-2019-18622...
CVE-2019-7185
This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...
CVE-2019-7185
This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...
Dell Command Configure CVE-2019-18575 Arbitrary File Overwrite Vulnerability
Description Dell Command Configure is prone to an arbitrary file-overwrite vulnerability. Successful exploits may allow an attacker to write arbitrary files in the context of the user running the affected application. Dell Command Configure prior to 4.2.1 are vulnerable. Technologies Affected Del...
Apache Olingo Multiple Security Vulnerabilities
Description Apache Olingo is prone to the following security vulnerabilities: 1. An XML External Entity injection vulnerability 2. A denial-of-service vulnerability 3. A remote-code execution vulnerability Attackers can exploit these issues to gain access to sensitive information, cause...
Security Advisory - Path Traversal Vulnerability in Several Smartphones
There is a path traversal vulnerability in several smartphones. The system does not sufficiently validate certain pathname from the application, an attacker should trick the user into installing, backing up and restoring a malicious application, successful exploit could cause information...
CZ.NIC Knot Resolver CVE-2019-19331 Denial of Service Vulnerability
Description CZ.NIC Knot Resolver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service condition. Knot Resolver versions prior to 4.3.0 are vulnerable. Technologies Affected CZ.NIC labs Knot Resolver 2.0.0 CZ.NIC labs Knot Resolver 2.1.0...
Security Advisory - DoS Vulnerability in Some Huawei Products
Some Huawei products have a DoS security vulnerability. Attackers with certain permissions perform specific operations on affected devices. Because the pointer in the program is not processed properly, the vulnerability can be exploited to cause the device to be abnormal. Vulnerability ID:...
JVN#49068796: Multiple MOTEX products vulnerable to privilege escalation
LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Impact An user who can login to the PC where the vulnerable product is installed may obtain unauthorized privileges and execute arbitrary code. Solution Update the Software Update to the latest versi...
MGASA-2019-0351 Updated httpie packages fix security vulnerability
Updated httpie packages fix security vulnerability: HTTPie is vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or her control...
SUSE-SU-2019:3126-1 Security update for haproxy
This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the 'chunked' bsc1154980. - Fixed an improper handling of headers which...
OPENSUSE-SU-2019:2575-1 Security update for cups
This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...
F5 SSL Orchestrator CVE-2019-6674 Denial of Service Vulnerability
Description F5 SSL Orchestrator is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial of service conditions. Technologies Affected F5 SSL Orchestrator 14.1.0 F5 SSL Orchestrator 14.1.2 F5 SSL Orchestrator 15.0.0 F5 SSL Orchestrator 15.0.1 Recommendation...
Security Advisory - Buffer Overflow Vulnerability in Huawei Atlas Product
There is a buffer overflow vulnerability in Huawei Atlas product. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash. Vulnerability ID: HWPSIRT-2019-08062 This vulnerability has been...