CVE-2019-3423

permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources...

Broadcom Brocade SANnav Information Disclosure Vulnerability (CNVD-2019-41466)

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in the authentication mechanism in Broadcom Brocade SANnav versions prior to 2.0. A local attacker could exploit this vulnerability to access sensitive information...

PT-2019-15720 · Cyrus +5 · Cyrus Imap +5

Name of the Vulnerable Software and Affected Versions: Cyrus IMAP versions 2.5.x through 2.5.13 Cyrus IMAP versions 3.x through 3.0.11 Description: The issue allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

SQL Injection Vulnerability in Qixing Quote System V2.0 da***.aspx Page (CNVD-2019-45198)

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

SQL Injection Vulnerability in Kaixin Quote System V2.0 da***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

Command Execution Vulnerability in Siemens PLC s7-300

S7-300 is one of the programmable logic controller PLC series products produced by Siemens AG of Germany. A command execution vulnerability exists in Siemens PLC s7-300, which can be exploited by an attacker to execute malicious commands and gain administrator privileges...

CVE-2019-0390

Under certain conditions SAP Data Hub corrected in DHFoundation version 2 allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users...

SQL Injection Vulnerability in Yunye CMS V2.0

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMSV2.0 SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Yunye CMS v2.0

Yunye cms enterprise building system is a specialized for small and medium-sized enterprise website construction of php open source cms. Yunye CMSv2.0 SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

CVE-2019-16210

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

CVE-2019-16206

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information...

CVE-2019-16205

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...

curl: NTLM type-2 heap out-of-bounds buffer read

An out-of-bounds read flaw was found in the way curl handled NTLMv2 type-2 headers. When connecting to a remote malicious server which uses NTLM authentication, the flaw could cause curl to crash...

Buffer Overflow Vulnerability in Free MP3 CD Ripper 2.8

MP3 CD Ripper is a powerful and easy CD authoring program. It is built on a CD ripper and audio converter. A buffer overflow vulnerability exists in Free MP3 CD Ripper 2.8, which can be exploited by attackers to cause a system crash...

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

Magento Input Validation Error Vulnerability (CNVD-2019-44999)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An input validation error vulnerability exists in Magento versions 2.3.1 before 2.3, 2.2.8 before 2.2, and 2.1.17...

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows for uncontrolled resource consumption, enabling attackers to disclose sensitive information.

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Code Execution Vulnerability in MyuCMS v2.1.1022

MyuCMS is a content management system developed using ThinkPHP. A code execution vulnerability exists in MyuCMS v2.1.1022, which can be exploited by an attacker to gain control of a web server...