4610 matches found
Cisco Data Center Network Manager Authentication Bypass Vulnerability
Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An authentication bypass vulnerability exists in the Web management interface of...
UBUNTU-CVE-2019-20063
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...
JetBrains Ktor framework injection vulnerability
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An injection vulnerability exists in JetBrains Ktor framework versions prior to 1.2.6. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the course...
WordPress ListingPro theme cross-site scripting vulnerability (CNVD-2020-01194)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ListingPro theme is a directory website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress...
DEBIAN-CVE-2019-19960
In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...
libxml2 Memory Leak Vulnerability
libxml2 is a library written in C for parsing XML documents . A memory leak vulnerability exists in the xmlParseBalancedChunkMemoryRecover of the parser.c file in versions of libxml2 prior to 2.9.10. No detailed vulnerability details are provided at this time...
cPanel Input Validation Error Vulnerability (CNVD-2020-03742)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a web-based...
Barco ClickShare Button R9861500D01 Key Disclosure Vulnerability
The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. A security vulnerability exists in Barco ClickShare Button R9861500D01 versions prior to 1.9.0. An attacker can exploit this vulnerability to obtain a symmetric encryption key and gai...
kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7)
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components such as kube-apiserver prior to v1.16.0, which make use of basic or bearer token authentication, and run ...
Apache SpamAssassin Operating System Command Injection Vulnerability
Apache SpamAssassin is an open source spam filter from the Apache USA Foundation. The product provides a filter for system administrators and supports categorizing email to block spam. A security vulnerability exists in Apache SpamAssassin versions prior to 3.4.3. An attacker could exploit the...
Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-04288)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ACRN Denial of Service Vulnerability
ACRN is an open source virtual machine monitor for the Internet of Things. A security vulnerability exists in versions prior to ACRN 2019w25.5-140,000p. An attacker can exploit the vulnerability to cause a denial of service assertion failure...
DEBIAN-CVE-2019-13740
Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
libyang buffer overflow vulnerability (CNVD-2019-45325)
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A buffer overflow vulnerability exists in versions prior to libyang 1.0-r5. The vulnerability stems from a networked system or product that performs operations in memory withou...
Zabbix SIA Zabbix Encryption Issues Vulnerabilities
Zabbix SIA Zabbix is an open source monitoring system from the Latvian company Zabbix SIA. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. Zabbix SIA An encryption issue vulnerability exists in versions of Zabbix prior to 5.0, which stems fr...
Google Chrome Blink Code Issue Vulnerability
Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A code issue vulnerability exists in versions of Blink prior to m11 in Google Chrome. The vulnerability arises from a design or...
CVE-2019-19536
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka CID-ead16e53c2f0...
Cloudera Manager Information Disclosure Vulnerability
Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. An information disclosure vulnerability exists in the Diagnostic Support Bundles in Cloudera Manager versions prior to 5.4.6...
ProFTPD 'tls_verify_crl' function authorization issue vulnerability
ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. An authorization issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD versions prior to 1.3.6. The vulnerability stems...