CVE-2016-4676

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

CVE-2019-16020 Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16018: Uncontrolled Resource Consumption

A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that...

Cisco IOS XR BGP EVPN Denial of Service Vulnerability (CNVD-2020-07196)

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial of service vulnerability exists in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN feature in Cisco IOS XR 6.6.1 and later. The vulnerability stems from improper handling ...

PT-2020-1384

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

PT-2020-1376

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality could allow an unauthenticated, remote attacker to cause a denial of service...

PT-2020-1382

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality. These vulnerabilities could allow an...

PT-2020-1385

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

Servicing stack update for Windows Server 2008 SP2: January 14, 2020

Servicing stack update for Windows Server 2008 SP2: January 14, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your...

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating...

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 10, 2019

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating...

Servicing stack update for Windows Server 2008 SP2: November 12, 2019

Servicing stack update for Windows Server 2008 SP2: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befor...

OSIsoft PI Vision Access Control Error Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. The OSIsoft PI Vision Access Control Error vulnerability can be exploited by an attacker to return unauthorized tagged...

CVE-2019-18275: Improper Access Control

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes...

CVE-2020-6860

libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute...

WS-2020-0325

The commit Fix overflow of nested netlink attributes in the file lib/odp-util.c. Fix that by checking the length of nested netlink attributes before updating 'nlalen' inside the header The crash method are formatgenericodpkey checkattrlen formatodpkeyattr The fix version is v2.5.11...

XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

enshrined/svg-sanitize before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript:alert substring...

GHSA-GF8J-V8X5-H9QP XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

enshrined/svg-sanitize before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript:alert substring...

OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

kind-of injection vulnerability

kind-of is a JavaScript type checking package. An injection vulnerability exists in the 'ctorName' function of the index.js file in kind-of version v6.0.2, which can be exploited by an attacker to override internal attributes and manipulate the results of type checking...