12456 matches found
Microsoft Windows Graphics Components CVE-2020-0607 Information Disclosure Vulnerability
Description Microsoft Windows is prone to a information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 160...
Oracle Siebel CRM CVE-2020-2559 Remote Security Vulnerability
Description Oracle Siebel CRM is prone to a remote security vulnerability. This vulnerability affects the 'UIF Open UI' component and can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 19.7 and prior Technologies Affected Oracle Siebel UI...
Oracle MySQL Server CVE-2020-2580 Remote Security Vulnerability
Description Oracle MySQL Server is prone to a remote security vulnerability in 'Server: DDL' component. The vulnerability can be exploited over the 'MySQL' protocol. This vulnerability affects the following supported versions: 8.0.17 and prior Technologies Affected Oracle MySQL Server 8.0.11 Orac...
Oracle Hyperion Financial Close Management CVE-2020-2563 Remote Security Vulnerability
Description Oracle Hyperion Financial Close Management is prone to a remote security vulnerability in 'Close Manager' component. The vulnerability can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 11.1.2.4 Technologies Affected Oracle Hyperion...
Microsoft Windows CryptoAPI CVE-2020-0601 Spoofing Vulnerability
Description Microsoft Windows is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Windows 10...
Fortinet FortiSIEM CVE-2019-16153 Hardcoded Credentials Vulnerability
Description Fortinet FortiSIEM is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable device and perform unauthorized actions. Versions prior to Fortinet FortiSIEM 5.2.6 are vulnerable. Technologies Affected Fortinet...
Symantec Endpoint Detection and Response CVE-2019-19547 Cross Site Scripting Vulnerability
Description Symantec Endpoint Detection and Response is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affect...
CVE-2018-16885
A flaw was found in the Linux kernel that allows the userspace to call memcpyfromiovecend and similar functions with a zero offset and buffer length. This can cause a read beyond the buffer boundaries flaw and, in certain cases, cause a memory access fault and a system halt by accessing invalid...
oVirt Engine CVE-2019-19336 Cross Site Scripting Vulnerability
Description oVirt Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the...
Libbsd Buffer Overflow Vulnerability
libbsd is a library that provides features commonly found in BSD systems. A buffer overflow vulnerability exists in the nlist.c file in versions of libbsd prior to 0.10.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...
Citrix SD-WAN CVE-2020-6175 Information Disclosure Vulnerability
Description Citrix SD-WAN Appliance is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. The following products and versions are vulnerable: NetScaler SD-WAN 10.0.x and prior Citrix SD-WAN 10.1.x are...
CVE-2014-2072
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks...
Stack overflow
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks...
CVE-2014-2072
CVE-2014-2072 affects Dassault Systemes Catia V5-6R2013. The issue is a Stack Buffer Overflow in CATIA V5-6R2013 due to inadequate boundary checks, reported as a network-based vulnerability with high to critical impact (CVSS2: 7.5, CVSS3.1: 9.8). Public references indicate exploitation resources ...
SQLite Multiple Security Vulnerabilities
Description SQLite is prone to the following security vulnerabilities. 1. Multiple denial-of-service vulnerabilities 2. Multiple security vulnerabilities An attacker can exploit these issues to cause denial-of-service conditions. SQLite version 3.30.1 is vulnerable. Technologies Affected Redhat...
cURL CVE-2019-15601 Remote Security Bypass Vulnerability
Description cURL is prone to a remote security-bypass vulnerability. An attacker can leverage this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. cURL versions prior to 7.68.0 are vulnerable. Technologies Affected Haxx Curl 7.34.0 Haxx Cur...
Apache Olingo CVE-2020-1925 Server Side Request Forgery Access Bypass Vulnerability
Description Apache Olingo is prone to an access-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Apache Olingo versions prior to 4.7.1 are vulnerable. Technologies Affected Apache Oling...
Cisco Webex Video Mesh Software CVE-2019-16005 Remote Command Injection Vulnerability
Description Cisco Webex Video Mesh Software is prone to a remote command injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected device. This issue is being tracked by Cisco Bug ID...
Cisco Crosswork Change Automation CVE-2019-16024 Cross Site Scripting Vulnerability
Description Cisco Crosswork Change Automation is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
Cisco Webex Centers CVE-2020-3116 Denial of Service Vulnerability
Description Cisco Webex Centers is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCvr16379, CSCvr16383 and CSCvr16386. Technologies Affected Cisco WebEx Event Center Cisco WebEx...