CVE-2019-4001

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

Cloud Calendar is vulnerable to dll hijacking

Cloud Calendar is a time management tool developed by Qingdao Softmedia Network Technology Co. A dll hijacking vulnerability exists in the Cloud Calendar client, which can be exploited by attackers to execute arbitrary code...

All K Song has a dll hijacking vulnerability

All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...

Cyxtera Technologies Unspecified Vulnerability in Cyxtera AppGate SDP Client

Cyxtera Technologies Cyxtera AppGate SDP is a software-defined network border protection solution from Cyxtera Technologies, U.S.A. Cyxtera AppGate SDP Client is one of the client programs. A security vulnerability exists in Cyxtera Technologies Cyxtera AppGate SDP Client versions 4.1.x through...

CVE-2019-16276

creationtimestamp| type| source ---|---|--- 2019-10-17 16:32:14+00:00| seen| https://t.me/cibsecurity/7478 2019-10-18 13:58:43+00:00| seen| https://t.me/SecLabNews/6022...

DEBIAN-CVE-2017-18635

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name...

The vulnerability in the client application of the Cisco Webex Teams software allows a perpetrator to execute arbitrary commands.

The vulnerability in the client application of the Cisco Webex Teams software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by guiding users through a specially crafted lin...

GHSA-63QC-P2X4-9FGF Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library

In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information...

Information disclosure

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windows SMB Client Driver Information Disclosure Vulnerability'...

CVE-2019-0353

Under certain conditions SAP Business One client B1ONHANA, SAP-M-BO, before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted...

mysql: Client programs unspecified vulnerability (CPU Oct 2019)

Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL...

mysql: Client programs unspecified vulnerability (CPU Oct 2019)

Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL...

PT-2019-7207 · Apache +2 · Apache Activemq +2

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ client versions prior to 5.15.5 Description: A remote shutdown command in the ActiveMQConnection class was exposed, allowing an attacker logged into a compromised broker to achieve denial of service on a connected client...

Stack overflow

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

Zoom Client Information Disclosure Vulnerability

Zoom Client is a video conferencing endpoint from Zoom USA that supports multiple platforms. An information disclosure vulnerability exists in Zoom Client. A remote attacker could force a user to join a video call with the camera active. It is because any website can interact with a zoom web serv...

libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

A flaw was found in libssh2. A server could send a multiple keyboard interactive response messages, whose total length are greater than the unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error. The highest threat from this...

CVE-2019-0697

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726...

CVE-2019-8264

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204...

VulnCheck KEV: CVE-2016-0051

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege...

LibVNC Null Pointer Reverse Reference Vulnerability

LibVNC is a cross-platform C library for implementing VNC server and client functionality. A null pointer back-reference vulnerability exists in VNC client code in versions prior to LibVNC commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7. An attacker could exploit this vulnerability to cause a...