CVE-2019-12388

Anviz access control devices perform cleartext transmission of sensitive information passwords/pins and names when replying to query on port tcp/5010...

CVE-2019-12388

Summary: CVE-2019-12388 affects Anviz access control devices, where sensitive fields (passwords/pins and names) are transmitted in cleartext in responses on TCP port 5010. This cleartext exposure is the root issue across multiple references (NVD/Red Hat/CVE lists). Impact (as stated): Potential d...

PT-2019-15807 · Hashicorp +1 · Terraform +1

Name of the Vulnerable Software and Affected Versions: Terraform versions prior to 0.12.17 Description: The issue concerns the transmission of sensitive data in cleartext HTTP when using the Azure backend with a shared access signature SAS in Terraform. This affects the...

DEBIAN-CVE-2019-6477

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to...

UBUNTU-CVE-2019-18976

An issue was discovered in respjsipt38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

CVE-2019-12408

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

PYSEC-2019-195

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-12408

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-12410

CVE-2019-12410 affects Apache Arrow 0.12.0–0.14.1, where memory for Arrow Arrays could be left uninitialized when reading RLE null data from Parquet. This impacts C++, Python, Ruby, and R implementations and could lead to leaking uninitialized memory if data is transmitted (e.g., Flight) or persi...

Schneider-electric Modicon Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause information disclosure when using the FTP protocol. File data ot500240.nasl...

Schneider-electric Modicon Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol. File...

DEBIAN-CVE-2010-0748

Transmission before 1.92 allows an attacker to cause a denial of service crash or possibly have other unspecified impact via a large number of tr arguments in a magnet link...

CVE-2010-0748

Transmission before 1.92 allows an attacker to cause a denial of service crash or possibly have other unspecified impact via a large number of tr arguments in a magnet link...

CVE-2010-0749

Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame...

CVE-2010-0749

Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame...

DEBIAN-CVE-2010-0749

Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame...

CVE-2010-0748

Transmission before 1.92 allows an attacker to cause a denial of service crash or possibly have other unspecified impact via a large number of tr arguments in a magnet link...

Information disclosure

Transmission before 1.92 allows an attacker to cause a denial of service crash or possibly have other unspecified impact via a large number of tr arguments in a magnet link...