Cisco Email Security Appliance AsyncOS Software Input Validation Error Vulnerability (CNVD-2020-32910)

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the Cisco Email Security Appliance prior to version 13.0. The vulnerability arises from a network...

PT-2020-1415

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.5 and 13.0.1 Description The issue is related to a vulnerability in the Java Secure Socket Extension JSSE component of Oracle Java SE, which is difficult to exploit and allows an unauthenticated attacker with network acce...

CVE-2019-8775

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

Nitro Software Nitro Pro Input Validation Error Vulnerability

Nitro Software Nitro Pro is a U.S. Nitro Software PDF document editor software. The software supports PDF document editing, PDF document formatting and encryption of PDF documents and other functions. An input validation error vulnerability exists in Nitro Software Nitro Pro versions prior to 13....

Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2019-41624)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS platforms. An attacker can exploit this vulnerability to obtain sensitive...

Adobe Media Encoder Out-of-Bounds Write Vulnerability

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS-based platforms. An attacker can exploit the vulnerability to execute code...

Cisco Email Security Appliance Input Validation Error Vulnerability (CNVD-2019-40783)

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the Sender Policy Framework feature of AsyncOS Software prior to version 13.5 in the Cisco ESA, whic...

FreePBX Contactmanager Cross-Site Scripting Vulnerability

FreePBX formerly known as Asterisk Management Portal is the FreePBX project's set of tools for configuring Asterisk IP telephony system through a GUI web-based graphical interface. contactmanager is one of the contact management components used in it. A cross-site scripting vulnerability exists i...

FreePBX Cross-Site Scripting Vulnerability (CNVD-2019-37883)

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A cross-site scripting vulnerability exists in Manager in FreePBX, versions 13.x prior to 13.0.2.6 and 15.x pri...

UBUNTU-CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Kerberos. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos...

Apple iOS Bluetooth Component Logic Flaw Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of Apple iOS prior to version 13. An attacker can exploit this vulnerability to obtain sensitive information...

Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...

PT-2019-2986 · Cisco · Cisco Nexus 9000 Series

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software versions prior to 13.27f or any 14.x release. Description: A vulnerability in the Link Layer Discovery Protocol LLDP subsystem could allow an adjacent,...

UBUNTU-CVE-2019-11727

A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerabilit...

CVE-2019-18976

An issue was discovered in respjsipt38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

Moderate: Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 13.0 director Bug Fix Advisory

Updated director installer packages that resolve various issues are now available for Red Hat OpenStack Platform 13.0 Queens for RHEL 7. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud running on...

CVE-2018-3303

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite subcomponent: EM Console. Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

TIBCO Statistica Server TIBCO Statistica Component Cross-Site Scripting Vulnerability

TIBCO Statistica Server is a suite of job servers from TIBCO Software that provides a governance framework for shared workspaces and reusable templates.Statistica is one of the components... A cross-site scripting vulnerability exists in the web application of the TIBCO Statistica component in...

Red Hat Openstack Insecure Retrieval Vulnerability

Red Hat OpenStack is an open source IaaS Infrastructure as a Service solution from Red Hat. The solution supports the creation and management of private, public, and hybrid clouds. openstack-rabbitmq-container and openstack-containers are among the container components. A security vulnerability...