data tracking utility Peekfd Segmentation Error DoS

The vulnerability of the data tracking utility’s peekfd function is caused by segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

infotocap Heap Buffer Overflow DoS

The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:50 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...

ppdpo utility Buffer Overflow DoS

The vulnerability of the ppdpo utility in the cups-ppdc package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...

unixcmd DoS

The vulnerability of the unixcmd utility, a tool for creating compatible virtual networks using Virtual Distributed Ethernet, stems from segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure by entering a specially crafted sequence of data into the...

DEBIAN-CVE-2019-13636

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...

CVE-2019-6625

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI also known as the BIG-IP Configuration utility...

Cross site scripting

On BIG-IP AFM, Analytics, ASM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the Configuration utility...

CVE-2019-6625: Improper Neutralization of Input During Web Page Generation

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI also known as the BIG-IP Configuration utility...

PT-2019-18207

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.0.0.4 F5 BIG-IP versions 14.1.0 through 14.1.0.5 Description A reflected cross-si...

CVE-2019-6626: Improper Neutralization of Input During Web Page Generation

On BIG-IP AFM, Analytics, ASM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the Configuration utility...

manhole utility DoS

The vulnerability of the manhole utility in the python-twisted-core package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...

qli Firebird2.5-classic-common Heap Buffer Overflow DoS

Vulnerability of the GIraise function sig=sig@entry=6 ../nptl/sysdeps/unix/sysv/linux/raise.c:64 is related to errors during pointer assignment for zero pointers 0x00007ffff6515875. Exploitation of this vulnerability may allow an attacker to cause a service failure through a specially crafted...

Cisco Integrated Management Controller Access Control Error Vulnerability (CNVD-2019-18903)

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. An access...

CVE-2019-1629

The CVE-2019-1629 issue affects Cisco Integrated Management Controller (IMC) via the configuration import utility. It stems from a failure to delete temporarily uploaded files, allowing an unauthenticated, remote attacker to gain write access and upload arbitrary data to the filesystem. This coul...

CVE-2019-1629: Missing Authentication for Critical Function

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

Intel SCS Discovery Utility Privilege Escalation

The vulnerability of the Intel SCS Discovery Utility component relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

TRISIS Group, Known for Physical Destruction, Targets U.S. Electric Companies

XENOTIME, the APT group behind the TRISIS industrial control system ICS event, has expanded its focus beyond the oil and gas industries, according to researchers. The group has recently been seen probing the networks of electric utility organizations in the U.S. and elsewhere – perhaps a precurso...

The Highly Dangerous 'Triton' Hackers Have Probed the US Grid

The same hackers behind a potentially lethal 2017 oil refinery cyberattack are now sniffing at US electrical utility targets...

CVE-2019-0128: Undefined Security Weakness

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

CVE-2019-1880

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...