Design/Logic Flaw

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could exploit this vulnerability by logging i...

CVE-2019-12622 Cisco RoomOS Software Privilege Escalation Vulnerability

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could exploit this vulnerability by logging i...

Siemens SIMATIC S7-300 PLC suffers from a denial of service vulnerability.

The Siemens SIMATIC S7-300 is a modular general-purpose controller from Siemens for the manufacturing industry. A denial of service vulnerability exists in the Siemens SIMATIC S7-300 PLC. An attacker can cause the HTTP service to refuse to respond by constructing a special data message...

PT-2019-3069 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software versions prior to Release 6.6.3 Description: A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality could allow an unauthenticated attacker who is in...

CVE-2019-13106

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution...

exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file...

rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can result in code...

The vulnerability of the Virtual Distributed Ethernet Switch vde_l3, related to segmentation errors, allows a attacker to cause a service failure.

The vulnerability of the Virtual Distributed Ethernet Switch vdel3 is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

The vulnerability of the nettle-hash cryptographic hash function’s implementation, caused by segmentation errors, allows a hacker to trigger a service failure.

The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...

The vulnerability of the connection tool to scanners using the parallel port umax_pp, related to segmentation errors, allows a intruder to cause a service failure.

The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

The vulnerability of the Texinfo makeinfo document conversion tool, caused by segmentation errors, allows a malicious actor to trigger a service failure.

The vulnerability of the Texinfo makeinfo document conversion tool is due to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

The vulnerability of the AAC stream processing tool faad, related to segmentation errors, allows a perpetrator to trigger a service failure.

The vulnerability of the AAC stream processing tool faad is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

The vulnerability of the bzip2recover restoration tool, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the bzip2recover restoration tool is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by entering a specially crafted sequence of data into the command line...

Microsoft Visual Studio Information Disclosure Vulnerability (CNVD-2019-22192)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An information disclosure vulnerability exists in Microsoft Visual Studio that stems from the progra...

CVE-2019-1620 Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could...

The vulnerability of the plot tool in the GNU plotutils graphical data visualization package allows a perpetrator to trigger a service failure.

The vulnerability of the plot tool in the GNU plotutils graphical data visualization package relates to initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering specially crafted data...

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...

The vulnerability of the h5dump program for processing hdf5 files arises from buffer overflows during the processing of command-line parameters, allowing attackers to cause service failures.

The vulnerability of the h5dump program for viewing hdf5 files arises from buffer overflows during the processing of command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure by entering a specially crafted sequence of data in the command line...

The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the Spectgen tool in the Edinburgh Speech Tool Library is related to division by zero errors. Exploiting this vulnerability could allow an attacker to cause a service failure in the application by entering specially crafted data...

The vulnerability of the imgcmp image comparison tool, related to segmentation errors, allows a hacker to cause a service failure.

The vulnerability of the image comparison utility imgcmp is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...