Microsoft Exchange Server '/Autodiscover' Server Side Request Forgery Security Bypass Vulnerability

Description Microsoft Exchange Server is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Microsoft Exchange Server 2013 Cumulative Update 22 and prior versions are...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2020-00537)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A memory corruption...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00488)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00483)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00213)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

Multiple Apple Products Disk Images Component Out-of-Bounds Read Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Disk Images is one of the components of the Disk Image Format. An out-of-bounds read vulnerability exists in the Disk...

Reliable Controls MACH-ProWebCom/Sys CVE-2019-18249 Cross Site Scripting Vulnerability

Description Reliable Controls MACH-ProWebCom/Sys are prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Vulnerability of microprogramming software for Intel Core and Intel Xeon processors, allowing attackers to enhance their privileges

The vulnerability of microprogramming software for Intel Core and Intel Xeon processors lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

WordPress bbPress Members Only Plugin Cross Site Request Forgery Vulnerability

Description The 'bbPress Members Only' Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. The 'bbPress Members Only'...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03571)

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU product.The SDX24 is a modem.The MDM9650 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 version 1.4.0. The vulnerability stems from a network system or product performing...

D-Link DIR-601 B1 CVE-2019-16326 Cross Site Request Forgery Vulnerability

Description D-Link DIR-601 B1 is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. D-Link DIR-601 B1 2.00NA is vulnerable; other versions may...

D-Link DIR-859 Routers CVE-2019-20213 Information Disclosure Vulnerability

Description D-Link DIR-859 routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information and perform unauthorized actions. Versions prior to D-Link DIR-859 1.07b03beta are vulnerable. Technologies Affected D-Link DIR-859 1.05 D-Link...

Libspiro 'spiro_to_bpath0()' function buffer overflow vulnerability

Libspiro is a curve plotting library. A buffer overflow vulnerability exists in the 'spirotobpath0' function in the spiro.c file in Libspiro 20190731 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

SQLite CVE-2019-19926 Incomplete Fix Denial of Service Vulnerability

Description SQLite is prone to a denial of service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. SQLite 3.30.1 is vulnerable; other versions may also be affected. Technologies Affected SQLite SQLite 3.30.1 Recommendations Block external access at the netwo...

cyrus-sasl buffer overflow vulnerability

cyrus-sasl is an implementation of the Cyrus SASL Simple Authentication Security Layer API capable of providing authentication authorization services on both the client and server side. A buffer overflow vulnerability exists in cyrus-sasl version 2.1.27. The vulnerability stems from a network...

GitLab CVE-2019-15584 Denial of Service Vulnerability

Description GitLab is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. GitLab versions prior to 12.3.2, 12.2.6, and 12.1.10 are vulnerable. Technologies Affected Gitlab GitLab Community Edition 10.2 Gitlab GitLab Community Edition...

NetHack Buffer Overflow Vulnerability

NetHack is a role-playing single-player game. A buffer overflow vulnerability exists in NetHack version 3.6.x prior to 3.6.4. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and wri...

Philips Veradius Unity, Pulsera, and Endura CVE-2019-18263 Denial of Service Vulnerability

Description Philips Veradius Unity, Pulsera, and Endura are prone to a denial-of-service vulnerability. An attacker can leverage this issue to cause denial-of-service condition. Technologies Affected Philips Endura Philips Pulsera Philips Veradius Unity Recommendations Block external access at th...

Sudo Multiple Security Bypass Vulnerabilities

Description Sudo is prone to multiple security-bypass vulnerabilities. Attackers can exploit these issues to bypass security restrictions and perform unauthorized actions. Sudo versions through 1.8.29 are vulnerable. Technologies Affected Todd Miller Sudo 1.3.5 Todd Miller Sudo 1.5 Todd Miller Su...