12454 matches found
Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware Cross Site Scripting Vulnerability
Description Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware are prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...
Cisco Finesse CVE-2019-15278 Cross Site Scripting Vulnerability
Description Cisco Finesse is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...
Cisco UCS Director CVE-2019-16003 Information Disclosure Vulnerability
Description Cisco UCS Director is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco bug ID CSCvr00602. Technologies Affected Cisco UCS Director 4.0.0.0 Cisco UC...
Cisco Emergency Responder CVE-2019-16025 HTML Injection Vulnerability
Description Cisco Emergency Responder is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to...
Bftpd Buffer Error Vulnerability
bftpd is a small , easy to configure FTP server for UNIX-like systems . A buffer error vulnerability exists in Bftpd version 5.3. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...
Netwide Assembler Buffer Overflow Vulnerability (CNVD-2020-02979)
Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A buffer overflow vulnerability exists in the expr function of the asm/eval.c file in version 2.14.02 of Netwide Assembler NASM. The vulnerability stems from a networked system ...
Fortinet FortiAuthenticator CVE-2019-16154 Cross Site Scripting Vulnerability
Description Fortinet FortiAuthenticator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Google Android System Component Multiple Information Disclosure Vulnerabilities
Description Google Android is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to obtain sensitive information that may aid in launching further attacks. These issues are being tracked by Android Bug IDs A-139738828, A-141890807 and A-142558228...
Google Android Kernel Component CVE-2020-0009 Local Privilege Escalation Vulnerability
Description Google Android is prone to a local privilege escalation vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of a privileged process. This issue is being tracked by Android Bug ID A-142938932. Technologies Affected Google Android Recommendations...
Google Android Media Framework CVE-2020-0002 Multiple Remote Code Execution Vulnerabilities
Description Google Android is prone to multiple remote code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues are being tracked by Android Bug ID...
Pillow SGI Buffer Overflow Vulnerability
Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/SgiRleDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data...
ngiflib heap buffer overflow vulnerability
ngiflib is a GIF image format decoding library written in C language. A buffer overflow vulnerability exists in the 'GifIndexToTrueColor' function of the ngiflib.c file in ngiflib version 0.4. The vulnerability stems from a networked system or product performing operations in memory without...
Cisco Data Center Network Manager XML External Entity Information Disclosure Vulnerability
Description Cisco Data Center Network Manager is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. This issue is being tracked by Cisco bug IDs CSCvr79188, CSCvr88730 and CSCvr88737. Cisco...
Cisco Data Center Network Manager Multiple Command Injection Vulnerabilities
Description Cisco Data Center Network Manager is prone to multiple command-injection vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary command on the underlying device with root privileges. These issues are being tracked by Cisco Bug IDs CSCvr44798,...
Cisco Data Center Network Manager Multiple Directory Traversal Vulnerabilities
Description Cisco Data Center Network Manager is prone to a multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve arbitrary files from th...
Cisco Data Center Network Manager Multiple Authentication Bypass Vulnerabilities
Description Cisco Data Center Network Manager is prone to multiple authentication-bypass vulnerabilities. An attacker can exploit these issues to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. These issues are bei...
GitLab Multiple Security Vulnerabilities
Description GitLab is prone to multiple security vulnerabilities. An attacker can exploit these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. GitLab versions prior to 11.4.13, 11.5.x prior to 11.5.6, and 11.6.x prior to 11.6.1 are...
CVE-2019-15505
An out-of-bounds read flaw was found in the DVB USB subsystem of the Linux kernel. There was no boundary check applied to the array in struct technisatusb2state state-buf until the 0xff byte is encountered. If the byte is not encountered within the limit, an exposure of kernel data structure...
Microsoft Exchange Server '/Autodiscover' Server Side Request Forgery Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Microsoft Exchange Server 2013 Cumulative Update 22 and prior versions are...
matio stack buffer overflow vulnerability (CNVD-2020-02704)
MATIO is an open source C library for reading and writing binary MATLAB MAT files. A buffer error vulnerability exists in the 'ReadNextCell' function of the mat5.c file in MATIO version 1.5.17. The vulnerability stems from a networked system or product performing operations in memory without...