11620 matches found
Linux kernel CVE-2019-19377 Use After Free Denial of Service Vulnerability
Description Linux kernel is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Linux kernel version 5.0.21 is vulnerable. Technologies Affected Linux kernel 5.0.21 Recommendations Permit local access for trusted individuals only...
Linux kernel CVE-2019-19378 Denial of Service Vulnerability
Description Linux kernel is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Linux kernel 5.0.21 is vulnerable. Technologies Affected Linux kernel 5.0.21 Recommendations Permit local access for trusted individuals only. Where...
typed_ast buffer overflow vulnerability (CNVD-2020-03184)
typedast is a Python parser. A buffer overflow vulnerability exists in typedast. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to other memory...
Mozilla Network Security Services Buffer Overflow Vulnerability
Mozilla Network Security Services NSS is a library of functions Network Security Services library from the Mozilla Foundation in the United States. The product provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer error vulnerability exists in Mozilla NSS...
Linux Kernel CVE-2019-10220 Directory Traversal Vulnerability
Description Linux Kernel is prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to access, write or execute arbitrary files. Linux kernel version 4.9.0 is vulnerable. Technologies Affected Linux kernel 4.9.0 Recommendations...
Node.js 'lodahs' Package CVE-2019-19771 Unspecified Security Vulnerability
Description The 'lodahs' Package for Node.js is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Node.js lodahs version 1.0.0 is vulnerable Technologies Affected Node...
Apache cordova-plugin-inappbrowser CVE-2019-0219 Privilege Escalation Vulnerability
Description Apache cordova-plugin-inappbrowser is prone to a privilege-escalation vulnerability. Remote attackers can exploit this issue to gain elevated privileges or execute arbitrary code in the context of the affected application. Versions prior to Apache cordova-plugin-inappbrowser 3.1.0 are...
Linux kernel Marvell WiFi chip driver buffer overflow vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the U.S. Marvell WiFi chip driver is one of the WiFi chip drivers. A buffer overflow vulnerability exists in the Marvell WiFi chip driver in the Linux kernel. The vulnerability arises wh...
Multiple Dell Products DSA-2019-164 Multiple Security Vulnerabilities
Description Multiple Dell products are prone to the following vulnerabilities: 1. A cross-site scripting vulnerability 2. An authentication-bypass vulnerability 3. A session fixation vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of the victim...
ABB Relion 650 and 670 Series CVE-2019-18247 Denial Of Service Vulnerability
Description ABB Relion 650 and 670 Series are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a device to reboot, denying service to legitimate users. The following versions of ABB Relion series are vulnerable: ABB Relion 650 series versions 1.3.0.5 and prior...
FreeIPA CVE-2019-14867 Denial of Service Vulnerability
Description FreeIPA is prone to a denial-of-service vulnerability. Attackers can exploit this issue to execute arbitrary code or crash the affected application, denying service to legitimate users. FreeIPA versions 4.6 prior to 4.6.7, versions 4.7 prior to 4.7.4 and versions 4.8 prior to 4.8.3 ar...
FreeIPA CVE-2019-10195 Information Disclosure Vulnerability
Description FreeIPA is prone to a information-disclosure vulnerability. The attackers can exploit this issue to obtain sensitive information that may lead to further attacks. FreeIPA version 4.6.x through and prior to 4.6.7, 4.7.x through and prior to4.7.4 and 4.8.x through and prior to 4.8.3 are...
IBM Sterling B2B Integrator CVE-2019-4387 SQL Injection Vulnerability
Description IBM Sterling B2B Integrator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
ROS communications-related packages buffer overflow vulnerability
ROS communications-related packages is a package related to ROS Robot Operating System communications. A buffer overflow vulnerability exists in ROS communications-related packages version 1.14.3 and earlier. The vulnerability arises when a networked system or product performs an operation in...
Advantech WebAccess SCADA Buffer Overflow (CVE-2019-6550)
A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within bwstwww.exe. Successful exploitation could lead to arbitrary code execution under context of...
Kaspersky Protection extension for Google Chrome CVE-2019-15684 Unauthorized Access Vulnerability
Description Kaspersky Protection extension for Google Chrome is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. Kaspersky Protection extension for Google Chrome versions...
Embedthis Software GoAhead Buffer Overflow Vulnerability
Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. A buffer overflow vulnerability exists in Embedthis Software GoAhead versions prior to 5.0.1. The vulnerability stems from a network system or product performing operations in memory without properly validating dat...
Dell EMC RSA Authentication Manager CVE-2019-18574 HTML Injection Vulnerability
Description Dell EMC RSA Authentication Manager is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based...
Multiple Kaspersky Products Multiple Security Vulnerabilities
Description Multiple Kaspersky Products are prone to the following security vulnerabilities: 1. Multiple arbitrary command-execution vulnerabilities 2. An information-disclosure vulnerability 3. A security-bypass vulnerability An attacker can exploit these issues to execute arbitrary commands,...
Multiple QNAP Products NAS-201911-25 Multiple Security Vulnerabilities
Description Multiple QNAP products are prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access to the affected device, inject and execute arbitrary code and read or write arbitrary files on the device. Technologies Affected Qnap Photo Station...