CVE-2019-15554

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...

CVE-2019-15551

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

Sql injection

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

CVE-2015-9335

CVE-2015-9335 : A SQL injection vulnerability exists in the WordPress limit-attempts plugin prior to version 1.1.1 during IP address handling. This affects the plugin used with WordPress, enabling potentially unauthorized SQL commands through crafted input. The CVSS indications show high impact (...

One simple action you can take to prevent 99.9 percent of attacks on your accounts

There are over 300 million fraudulent sign-in attempts to our cloud services every day. Cyberattacks aren’t slowing down, and it’s worth noting that many attacks have been successful without the use of advanced technology. All it takes is one compromised credential or one legacy application to...

Microsoft Windows Remote Desktop Protocol Server CVE-2019-1225 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version 18...

F5 Networks BIG-IP : BIG-IP mcpd vulnerability (K87920510)

When processing authentication attempts for control-plane users, mcpd leaks a small amount of memory. Under rare conditions, attackers with access to the management interface can eventually deplete memory on the system. CVE-2019-6647 Impact Repeated failed authentication attempts progressively...

The vulnerability of the automated system for managing personal data “Tula” stems from the lack of mechanisms to limit the number of authentication attempts. This allows a perpetrator to select a user password.

The vulnerability of the automated system for managing personal data “Tula” is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to select a user password remotely...

Vulnerability of the software complex: Regional electronic budget. The integration platform, which is related to the shortcomings of the mechanism for limiting the number of authentication attempts, allows a violator to select a user password.

Vulnerability of the software complex: Regional electronic budget. The integration platform is connected to the shortcomings of the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability can allow a malicious actor to select a user password remotely...

PT-2019-19451 · Audiocodes · Audiocodes Mediant 500L-Msbr +1

Name of the Vulnerable Software and Affected Versions: AudioCodes Mediant 500L-MSBR versions F7.20A through 7.20A.252.062 AudioCodes Mediant 500-MBSR versions F7.20A through 7.20A.252.062 AudioCodes Mediant M800B-MSBR versions F7.20A through 7.20A.252.062 AudioCodes Mediant 800C-MSBR versions...

WordPress Limit Login Attempts Plugin Authentication Bypass

An authentication bypass vulnerability exists in WordPress Limit Login Attempts Plugin. Successful exploitation of this vulnerability allows remote attackers to bypass authentication and the rate limiting service...

Microsoft Exchange Server CVE-2019-1137 Spoofing Vulnerability

Description Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Exchan...

Microsoft Edge Chakra Scripting Engine CVE-2019-1103 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

The vulnerability of the BARS.Web-Sudy platform, related to the lack of mechanisms to limit the number of authentication attempts, allows a violator to select a user password.

The vulnerability of the BARS.Web-Sudy platform is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to select a user password by disabling the reception of cookies from the browser...

The vulnerability in the “Regional Program Capital Renovation Management” platform relates to a lack of mechanisms to limit the number of authentication attempts. This allows a violator to select a user password.

The vulnerability in the “Regional Program Capital Renovation Management” platform is related to a deficiency in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to select a user password by disabling the reception of cookies...

Microsoft Windows Speech API CVE-2019-0985 Remote Code Execution Vulnerability

Description Microsoft Windows Speech API is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...

Vulnerability Spotlight: Remote code execution vulnerabilities in Adobe Acrobat Reader

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Executive summary There are two remote code execution vulnerabilities in Adobe Acrobat Reader that could occur if a user were to open a malicious PDF on their machine using the software. Acrobat is the most widely used PDF reader...

Microsoft Windows JET Database Engine CVE-2019-0898 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...