CVE-2019-1631: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could...

CVE-2019-1874: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protection mechanisms on the...

Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

Cisco Integrated Management Controller Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

PT-2019-2738

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2019-2443

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog affected versions not specified Description The issue is related to a lack of protection against cross-site request forgery CSRF attacks in the web-based management interface. An attacker could exploit this by...

PT-2019-2442

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router affected versions not specified Cisco RV215W Wireless-N VPN Router affected versions not specified Description A vulnerabilit...

PT-2019-2440

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description A vulnerability in the vManage web-based UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage...

PT-2019-2548

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to access potentially sensitive system usage informati...

PT-2019-2553

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct...

CVE-2019-1055

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

CVE-2019-1081

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...

CVE-2019-1005

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

CVE-2019-0988

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

CVE-2019-1081: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging MOTW. Failing to set the MOTW means that a large number of Microsoft security technologies are bypassed. In a web-based attack scenario, an attacker could host a malicious website that is...