UBUNTU-CVE-2019-3995

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request...

Apache Incubator Superset Information Disclosure Vulnerability

Apache Incubator Superset is a suite of enterprise-class business intelligence Web applications from the Apache Apache Software Foundation in the United States. The program features data collection, data visualization and authentication. A security vulnerability exists in Apache Incubator Superse...

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP...

PT-2019-16836 · Elog · Elog

Name of the Vulnerable Software and Affected Versions: ELOG versions 3.1.4-57bea22 and below Description: The issue is related to a denial of service vulnerability caused by a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET reque...

Microsoft Remote Desktop Protocol Denial of Service Vulnerability

Microsoft Windows 10, etc. are a series of operating systems released by Microsoft, U.S.A. Remote Desktop Protocol RDP is one of the protocols based on multi-channel in Windows that enables remote connection and control of servers or computer. A denial of service vulnerability exists in Microsoft...

Apple macOS Catalina Core Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed for Mac computers. A memory corruption vulnerability exists in the Apple macOS Catalina kernel, which can be exploited by an attacker to submit a special request to execute arbitrary code in kernel context...

CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-1490

A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'...

The vulnerability of the Microsoft Azure Stack hardware platform, related to the ability to bypass authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Microsoft Azure Stack software platform relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created request...

Embedthis Software GoAhead Denial of Service Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. An unspecified vulnerability exists in Embedthis Software GoAhead. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted HTTP request...

Ruby OpenSSL extension encryption issue vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the software developer Yukihiro Matsumoto. openSSL extension is an OpenSSL security extension used in it. A cryptographic issue exists in the OpenSSL extension in Ruby versions 2011-09-01 through 2011-11-03,...

ProFTPD Code Issue Vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...

CVE-2019-18580

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host...

Design/Logic Flaw

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

Information Disclosure Vulnerability in Multiple Cisco Products (CNVD-2019-44128)

Cisco Webex Meeting Center is an online collaborative videoconferencing solution from Cisco.Cisco Webex Event Center is a webinar and online event management platform.Cisco Webex Support Center is a videoconferencing solution for service support teams. Cisco Webex Event Center is a webinar and...

The vulnerability of Cisco Firepower Management Center (FMC) software lies in its susceptibility to attacks due to insufficient checks on incoming traffic. This allows attackers to bypass virus checklists and malware policies, and send malicious traffic through the vulnerable device.

The vulnerability of Cisco Firepower Management Center FMC software exists due to insufficient checks on incoming traffic. Exploiting this vulnerability allows a malicious actor to bypass policies that require checking files and malware programs, and send malicious traffic through the vulnerable...

The vulnerability of the Network Block Device (NBD) hardware emulation server in QEMU allows a hacker to induce a maintenance failure.

The vulnerability of the Network Block Device NBD emulation server of QEMU is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially crafted request...

McAfee Advanced Threat Defense (ATD) Remote Code Execution Vulnerability

McAfee Advanced Threat Defense ATD is a set of threat detection and defense solutions from the U.S. company McAfee McAfee, providing malware analysis, sharing threat intelligence and isolating compromised systems. A remote code execution vulnerability exists in McAfee Advanced Threat Defense ATD...

McAfee Advanced Threat Defense (ATD) Information Disclosure Vulnerability (CNVD-2019-41727)

McAfee Advanced Threat Defense ATD is a set of threat detection and defense solutions from the U.S. company McAfee McAfee, providing malware analysis, sharing threat intelligence and isolating compromised systems. McAfee Advanced Threat Defense ATD has an information disclosure vulnerability. An...