11612 matches found
Apache CXF Denial of Service and Unauthorized Access Vulnerabilities
Description Apache CXF is prone to a denial-of-service vulnerability and an unauthorized access vulnerability. Attackers can exploit these issues to cause a denial-of-service condition and bypass certain security restrictions and gain unauthorized access; this may aid in launching further attacks...
Cisco Industrial Network Director CVE-2019-15973 Cross Site Scripting Vulnerability
Description Cisco Industrial Network Director is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This ca...
Multiple Trend Micro Products Multiple Security Vulnerabilities
Description Multiple Trend Micro Products are prone to the following security vulnerabilities: 1. An information-disclosure vulnerability 2. An arbitrary file-deletion vulnerability An attacker can exploit this issue to obtain sensitive information or delete arbitrary files from the affected...
Joomla! Core CVE-2019-18674 Information Disclosure Vulnerability
Description Joomla! Core is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Joomla! Core versions 3.6.0 through 3.9.12 are vulnerable. Technologies Affected Joomla Joomla! 3.2 Joomla...
Google Pixel CVE-2019-2210 Privilege Escalation Vulnerability
Description Google Pixel is prone to a privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. This issue are being tracked by Android Bug ID A-139148442. Technologies Affected Google Android 10.0 Google Android 9.0 Google Pixel 2 Google Pixel 2 XL...
Dell EMC iDRAC CVE-2019-3764 Unauthorized Access Vulnerability
Description Dell EMC iDRAC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. The following Dell products are affected: Dell EMC iDRAC8 versions prior to 2.70.70.70 are...
IBM QRadar SIEM CVE-2019-4470 Unspecified Cross Site Scripting Vulnerability
Description IBM QRadar SIEM is prone to an unspecified cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based...
Google Android Framework Multiple Security Vulnerabilities
Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. Multiple information-disclosure vulnerabilities An attacker can exploit these issues to gain elevated privileges or gain access to sensitive information; this may...
Apache Impala CVE-2019-10084 Authorization Bypass Vulnerability
Description Apache Impla is prone to a authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions or gain elevated privileges; this may aid in launching further attacks. Apache Impala versions 2.7.0 through 3.2.0...
IBM Security Secret Server CVE-2019-4634 Multiple Information Disclosure Vulnerabilities
Description IBM Security Secret Server is prone to multiple information-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. Technologies Affected IBM Security Secret Server 10.4.0 IBM Security Secret Server 10.5.0...
Apache NiFi Multiple Information Disclosure Vulnerabilities
Description Apache NiFi is prone to multiple information-disclosure vulnerabilities. Attackers can exploit this issue to obtain potentially sensitive information. This may lead to further attacks. Apache NiFi versions 1.3.0 through 1.9.2 are vulnerable. Technologies Affected Apache Nifi 1.3.0...
Google Android Library CVE-2019-2201 Remote Code Execution Vulnerability
Description Google Android is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. This issue is being tracked by Android bug ID A-120551338. Technologies Affected Google Android 10.0 Google Androi...
The vulnerability of the libssh2 library, related to reading data beyond the buffer limit, allows an attacker to cause a service failure or gain unauthorized access to protected information.
The vulnerability of the libssh2 library lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or gain unauthorized access to protected information by connecting to an SSH server...
Redhat Quay CVE-2019-3865 HTML Injection Vulnerability
Description Redhat Quay is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-bas...
Apple Xcode Multiple Memory Corruption Vulnerabilities
Description Apple Xcode is prone to multiple memory corruption vulnerabilities. A remote attacker can leverage these issues to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Versions prior to Xcode 11...
F5 BIG-IP AFM CVE-2019-6658 SQL Injection Vulnerability
Description F5 BIG-IP AFM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
Symantec Endpoint Protection SONAR Component CVE-2019-12752 Security Bypass Vulnerability
Description Symantec Endpoint Protection is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. Symantec Endpoint Protection versions prior to 12.0.2 are vulnerable. Technologi...
Xen CVE-2019-18423 Denial of Service Vulnerability
Description Xen is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash hypervisor, denying service to legitimate users. Xen version 4.8 and later are vulnerable. Technologies Affected Xen Xen 4.10 Xen Xen 4.10.0 Xen Xen 4.10.1 Xen Xen 4.10.2 Xen Xen 4.11.0 Xen...
Xen CVE-2019-18420 Denial of Service Vulnerability
Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version 4.6 and later are vulnerable. Technologies Affected Xen Xen 4.10 Xen Xen 4.10.0 Xen Xen 4.10.1 Xen Xen 4.10.2 Xen...
Xen CVE-2019-18422 Security Vulnerability
Description Xen is prone to a security vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, gain elevated privileges and corrupt the data. Xen versions through 4.12.x are vulnerable. Technologies Affected Xen Xen 2.0 Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 X...