PT-2019-4235

Name of the Vulnerable Software and Affected Versions Cisco Stealthwatch Enterprise affected versions not specified Description The issue is related to the web-based management interface of Cisco Stealthwatch Enterprise, where insufficient validation of user-supplied input allows for a cross-site...

Openfind MAIL2000 /cgi-bin/portal Login Function Cross-Site Scripting Vulnerability

Openfind Mail2000 is a Web-based e-mail system. A cross-site scripting vulnerability exists in the login function of /cgi-bin/portal in Openfind Mail2000 versions 6.0 and earlier and 7.0 and earlier. The vulnerability stems from a lack of proper validation of client data by the WEB application. A...

PT-2019-4236

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a...

Footy Tipping Software AFL Web Edition Cross-Site Scripting Vulnerability

Footy Tipping Software AFL Web Edition is a web-based soccer competition software program. A cross-site scripting vulnerability exists in Footy Tipping Software AFL Web Edition version 2019, which can be exploited by an attacker to execute client-side code...

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

According to its self-reported version, Cisco Identity Services Engine Software is affected by a vulnerability. A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to...

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permission for allurls. An attacker who successfully exploited this vulnerability could trick a browser into installing an extension without the user's consent. To...

Zoho ManageEngine ADSelfService Plus Cross-Site Request Forgery Vulnerability

Zoho ManageEngine ADSelfService Plus is a Web-based end-user password management software from Zoho. A cross-site request forgery vulnerability exists in Zoho ManageEngine ADSelfService Plus. The vulnerability stems from the web application not adequately verifying that requests come from a trust...

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability ...

Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands will be executed wit...

PT-2019-3976

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site...

PT-2019-3962

Name of the Vulnerable Software and Affected Versions Cisco RV Series Routers affected versions not specified Cisco Small Business RV016 affected versions not specified Cisco Small Business RV042 affected versions not specified Cisco Small Business RV042G affected versions not specified Cisco Sma...

PT-2019-4039

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director affected versions not specified Description The issue is related to insufficient protection of the web page structure in the Cisco Industrial Network Director's web-based management interface. This could allow...

PT-2019-3974

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016 versions prior to the fixed version Cisco Small Business RV042 versions prior to the fixed version Cisco Small Business RV042G versions prior to the fixed version Cisco Small Business RV082 versions prior to the fixe...

CSET Version 9.2 Now Available

The Cybersecurity and Infrastructure Security Agency CISA has released version 9.2 of its Cyber Security Evaluation Tool CSET. CSET is a desktop software tool that guides asset owners and operators through a consistent process for evaluating control system networks as part of a comprehensive...

Command Execution Vulnerability in Coppermine

Coppermine Photo Gallery is a WEB-based graphics gallery management program. Coppermine suffers from a command execution vulnerability that can be exploited by an attacker to execute system commands...