205 matches found
CVE-2019-15979
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system OS. For more information about...
CVE-2019-10915
A vulnerability has been identified in TIA Administrator All versions V1.0 SP1 Upd1. The integrated configuration web application TIA Administrator allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access t...
GHSA-HWCX-9P4J-7HWJ XML Entity Expansion in Pippo
XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...
XML Entity Expansion in Pippo
XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...
ALPINE-CVE-2019-8320
A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files which now include path-checking code for symlinks, it would delete the target destination. If that destination was hidden behind a symlink, a malicious gem could...
PT-2019-11248
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
F5 Networks BIG-IP : BIND vulnerability (K00040234)
A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1, and versions 9.10.7-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 of th...
Security Bulletin: A vulnerability in the SQLite component of the Response Time agent affects IBM Performance Management products
Summary SQLite is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by getNodeSize function in ext/rtree/rtree.c. By using a specially-crafted database, a remote attacker could overflow a buffer and cause unspecified impacts on the system. Vulnerability Details CVEID:...
Input validation
A vulnerability in the Secure Copy Protocol SCP server of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation of...
PT-2017-12242
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
PT-2017-18470
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
PT-2017-18491
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Qualcomm Camera operating system for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the NVIDIA GPU operating system for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the MediaTek video driver for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Qualcomm Android operating system’s sound driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of NVIDIA’s Android operating system video driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of NVIDIA’s Android operating system driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Qualcomm Android operating system’s driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the Audioserver component of the libeffects sub-component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...