Remote code execution

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'...

The vulnerability of the resident relational SAP HANA database, which exists due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the resident relational SAP HANA database exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Kentico Cross-Site Scripting Vulnerability

Kentico is the United States Kentico company's set of ASP.NET-based content management system CMS. A cross-site scripting vulnerability exists in Kentico versions prior to 12.0.50. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Audible has an unspecified vulnerability

Audible is an online playback application for audiobooks from the American company Audible. A security vulnerability exists in versions 2.34.0 and earlier of Audible, based on the Android platform, which stems from the program's failure to validate SSL credentials against Adobe SDKs. An attacker...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-16052)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU product.The...

SpotAuditor 'Base64' Denial of Service Vulnerability

SpotAuditor is a useful password recovery software for recovering passwords stored in your computer, which is mainly used to get the list of passwords that have been saved in the local computer, the list of access URLs, and the list of programs that have been launched. A denial of service...

CVE-2019-15973

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected application. The vulnerability is due to insufficient validati...

CVE-2019-0721

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719...

CVE-2019-1234

A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'...

CVE-2019-1234

CVE-2019-1234 is a spoofing vulnerability in Microsoft Azure Stack where requests to the Azure Stack Portal may be mishandled, enabling a remote attacker to obtain screenshots and other sensitive VM information. Affected product: Azure Stack. Root cause per the sources: failure to properly valida...

Zucchetti InfoBusiness Cross-Site Scripting Vulnerability

Zucchetti InfoBusiness is a business intelligence solution that uses multiple data to generate reports to measure company trends. A reflected cross-site scripting vulnerability exists in Zucchetti InfoBusiness 4.4.1 and earlier versions. The vulnerability stems from the failure of the browsing...

The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by connecting to a vulnerable system using the RDP protocol a...

Dolibarr ERP/CRM Injection Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An injection vulnerability exists in Dolibarr ERP/CRM version...

The vulnerability in the implementation of the OSPF network protocol on Junos OS routers such as MX2008, MX2010, MX2020, MX480, and MX960 allows a attacker to cause service interruptions.

The vulnerability of the OSPF network protocol implementation in Junos OS routers of the MX2008, MX2010, MX2020, MX480, and MX960 models exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2019-35574)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...

CVE-2019-17402

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

CVE-2019-0370

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection...

SugarCRM PHP code injection vulnerability (CNVD-2019-34428)

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the EmailMan module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...

SugarCRM Administration Module SQL Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...

CVE-2019-13328

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...