781 matches found
Apple macOS Mojave APFS Component Code Execution Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component of Apple macOS Mojave versions prior to 10.14.4. The vulnerability can be exploited by ...
Airsonic Trust Management Issues Vulnerabilities
Airsonic is a web-based streaming server. A security vulnerability exists in Airsonic version 10.2.1. An attacker can exploit the vulnerability to brute-force break passwords...
Apple Xcode LLVM Component Memory Corruption Vulnerability
Apple Xcode is the United States Apple Apple company's set of integrated development environment for developers, it is mainly used for the development of Mac OS X and iOS applications. LLVM Low Level Virtual Machine is a set of LLVM team developed a framework for framing the compiler compiler...
Maccms Arbitrary PHP Code Execution Vulnerability
Maccms is a PHP-based content management system CMS for film and television. A code injection vulnerability exists in Maccms version 10. A remote attacker can exploit this vulnerability to inject and execute arbitrary PHP code...
CVE-2019-3582
Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security ENS 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances...
CVE-2019-8394
Zoho ManageEngine ServiceDesk Plus SDP before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization...
CVE-2019-2541
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...
Apple macOS High Sierra AMD Out-of-Bounds Read Vulnerability (CNVD-2019-01532)
Apple macOS High Sierra is a suite of specialized operating systems developed for Mac computers by Apple, Inc. AMD is one of the AMD product components. An out-of-bounds read vulnerability exists in AMD in Apple macOS High Sierra version 10.13.4. A local attacker could exploit the vulnerability t...
DEBIAN-CVE-2018-20543
There is an attempted excessive memory allocation at libxsmmsparsecscreader in generatorspgemmcscreader.c in LIBXSMM 1.10 that will cause a denial of service...
CVE-2018-7793
A Credential Management vulnerability exists in FoxView HMI SCADA All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 CCS 9.4 and FoxView 10.5. which could cause unauthorized disclosure, modification, or disruption in service when the password is...
CVE-2018-1897
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 152462...
PT-2018-11029 · Node.Js +3 · Node.Js +3
Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 6.15.0 Node.js versions prior to 8.14.0 Node.js versions prior to 10.14.0 Node.js versions prior to 11.3.0 Description: The issue allows an attacker to cause a Denial of Service DoS by sending headers very slowly,...
PT-2018-11028 · Node.Js +4 · Node.Js +4
Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 6.15.0 Node.js versions prior to 8.14.0 Node.js versions prior to 10.14.0 Node.js versions prior to 11.3.0 Description: The issue allows for a Denial of Service with large HTTP headers. By using a combination of many...
Apple macOS Mojave Intel Graphics Driver Uninitialized Memory Information Disclosure Vulnerability
Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the integrated graphics drivers. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS Mojave versions prior to 10.14, which arises from a failur...
Apple macOS Mojave Kernel Buffer Overflow Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A buffer overflow vulnerability exists in the Kernel component of Apple macOS Mojave version 10.14. The vulnerability can be exploited by an application to execute...
CVE-2018-17447
An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...
CVE-2018-3172
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...
EnableQ Online Questionnaire Engine V10 Full Version Code Execution Vulnerability in Frontend
EnableQ online survey engine is a universal online survey management platform developed by Beijing Covey Nengdang Information Technology Co. A code execution vulnerability exists in the frontend of EnableQ Online Survey Engine V10 full version. An attacker can exploit the vulnerability to execute...
IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability (CNVD-2018-20658)
IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10. A remote attack...
IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability
IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10, which stems fro...