CVE-2020-2003

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....

CVE-2020-2008

CVE-2020-2008 affects Palo Alto Networks PAN-OS across versions: PAN-OS 7.1 and 8.0, and 8.1 prior to 8.1.14. The vulnerability is an OS command injection and external control of filename in the management interface, allowing authenticated administrators to run code with root privileges or delete...

Privilege Escalation

java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...

Privilege Escalation

java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...

Privilege Escalation

java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect integrity and availability of the system via unknown vectors...

Arbitrary File Overwrite Vulnerability in Motrix Windows Version

Motrix is an open-source, free, all-in-one downloader with a very clean and minimalist interface. An arbitrary file overwrite vulnerability exists in the Windows version of Motrix, which can be exploited by attackers to compromise the integrity of a system...

CVE-2019-4541

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814...

Input validation

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814...

CVE-2019-4637

IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 170043...

Input validation

IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 170043...

CVE-2019-4637

CVE-2019-4637 affects IBM Security Secret Server. The vulnerability stems from incomplete blocklisting used for input validation in Secret Server 10.7, allowing attackers to bypass application controls and potentially impact system integrity and data. IBM’s security bulletin notes this issue has ...

Design/Logic Flaw

On impacted versions and platforms the Trusted Platform Module TPM system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or...

CVE-2019-4556

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205...

patch: do_ed_script in pch.c does not block strings beginning with a ! character

A flaw was found in GNU patch through version 2.7.6. Strings beginning with a exclamation mark are not blocked by default. When ed receives an exclamation mark-prefixed command line argument, the argument is executed as a shell command. The highest threat from this vulnerability is to data...

kernel: net-sysfs: *_queue_add_kobject refcount issue

A flaw was found in the way the rxqueueaddkobject and netdevqueueaddkobject functions in the Linux kernel handled refcounting of certain objects. This flaw allows a local user who can trigger the error code path to use this vulnerability to disturb the integrity of the system...

CVE-2019-4329

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209...

CVE-2019-2959

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion component: Security Models. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting...

The vulnerability of the fly-admin-mic component in the FLY operating environment of the Astra Linux system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the fly-admin-mic component in the FLY operating environment of the Astra Linux system is related to a flaw in the file system integrity checking mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of UEFI (BIOS) software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of UEFI BIOS software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

Design/Logic Flaw

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise...