CVE-2019-1140

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

CVE-2019-1145

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

CVE-2019-12103

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2019-1030

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attac...

Command injection

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability...

Command injection

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities...

CVE-2019-12104

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command injection vulnerabilities...

CVE-2019-12104

CVE-2019-12104 affects TP-Link M7350 V3 web-based configuration interface with firmware before 190531. Connected documents describe several post-authentication command injection vulnerabilities in this interface. The Red Hat entry (RH:CVE-2019-12104) corroborates the post-auth vulnerability class...

CVE-2019-12103

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2019-12103

The CVE-2019-12103 issue affects TP-Link M7350 V3 with firmware before 190531. The web-based configuration interface is vulnerable to a pre-authentication command injection, enabling an attacker to execute commands without authentication. Red Hat and CNVD entries corroborate the same pre-auth vul...

Johnson Controls MS-NCE2520-0 Metasys NCE Controller

Binary data 764892.prm...

CVE-2019-12103: Improper Neutralization of Special Elements used in an OS Command

The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2019-1030: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attac...

Johnson Controls MS-NCE2526-0 Metasys NCE Controller

Binary data 764891.prm...

CVE-2019-1192: Incorrect Authorization

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully...

Johnson Controls MS-NCE2566-0 Metasys NCE Controller

Binary data 764889.prm...

PT-2019-12642

Name of the Vulnerable Software and Affected Versions TP-Link M7350 V3 versions prior to firmware 190531 Description The web-based configuration interface is affected by several post-authentication command injection issues. Recommendations For versions prior to firmware 190531, update the firmwar...

Johnson Controls MS-NCE2510-0 Metasys NCE Controller

Binary data 764894.prm...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could th...

Microsoft Outlook Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...