CVE-2019-4720

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125...

Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

Microsoft Windows Remote Desktop Gateway Remote Code Execution Vulnerability

Microsoft Windows Remote Desktop Gateway is a Windows-based remote desktop gateway. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Gateway RD Gateway. An attacker could exploit this vulnerability by connecting to the target system using RDP and sending a speciall...

Vulnerabilities fixed in Nginx

A malicious party could exploit the vulnerability to obtain system data obtain system data. To exploit the vulnerability, the malicious party must make a specially prepared HTTP request. The developers of Nginx have made updates available to fix the vulnerability. You can download the updates fro...

Cisco UCS Director Access Control Error Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. An access control error vulnerability exists in the authentication logic of the web management interface in Cisco UCS Director Releases prior to 6.7.3.1. A remote attacker could exploit t...

ABB PB610 Panel Builder 600 PB610 HMIStudio DLL Parsing Vulnerability

ABB PB610 Panel Builder 600 is a software for designing graphical user interfaces for the CP600 control panel platform. A security vulnerability in the ABB PB610 Panel Builder 600 PB610 HMIStudio component parsing DLL allows remote attackers to exploit the vulnerability by submitting a special fi...

Contao Output Improperly Encoded or Escaped Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management and CSS frameworks. An improper output encoding or escaping vulnerability exists in Contao versions 4.8.4 and 4.8.5. An attacker can exploit this vulnerability by...

UBUNTU-CVE-2019-3995

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request...

Apache Incubator Superset Information Disclosure Vulnerability

Apache Incubator Superset is a suite of enterprise-class business intelligence Web applications from the Apache Apache Software Foundation in the United States. The program features data collection, data visualization and authentication. A security vulnerability exists in Apache Incubator Superse...

PT-2019-16836 · Elog · Elog

Name of the Vulnerable Software and Affected Versions: ELOG versions 3.1.4-57bea22 and below Description: The issue is related to a denial of service vulnerability caused by a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET reque...

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.

The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP...

Apple macOS Catalina Core Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed for Mac computers. A memory corruption vulnerability exists in the Apple macOS Catalina kernel, which can be exploited by an attacker to submit a special request to execute arbitrary code in kernel context...

Microsoft Remote Desktop Protocol Denial of Service Vulnerability

Microsoft Windows 10, etc. are a series of operating systems released by Microsoft, U.S.A. Remote Desktop Protocol RDP is one of the protocols based on multi-channel in Windows that enables remote connection and control of servers or computer. A denial of service vulnerability exists in Microsoft...

CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-1490

A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'...

The vulnerability of the Microsoft Azure Stack hardware platform, related to the ability to bypass authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Microsoft Azure Stack software platform relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created request...

Embedthis Software GoAhead Denial of Service Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. An unspecified vulnerability exists in Embedthis Software GoAhead. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted HTTP request...

Ruby OpenSSL extension encryption issue vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the software developer Yukihiro Matsumoto. openSSL extension is an OpenSSL security extension used in it. A cryptographic issue exists in the OpenSSL extension in Ruby versions 2011-09-01 through 2011-11-03,...

ProFTPD Code Issue Vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...

CVE-2019-18580

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host...