748 matches found
SAP NetWeaver Process Integration CVE-2019-0367 Remote Authorization Bypass Vulnerability
Description SAP NetWeaver Process Integration is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. SAP NetWeaver Process Integration versions 1.0 and 2.0 are vulnerable...
WebKit CVE-2019-8720 Memory Corruption Vulnerability
Description WebKit is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Versions prior to Apple iTun...
Google Android System Component Multiple Security Vulnerabilities
Description Google Android is prone to multiple security vulnerabilities. An attacker can leverage these issues to gain access to sensitive information or elevated privileges. These issues are being tracked by Android IDs A-123700348, A-124940143 Technologies Affected Google Android 10.0 Google...
Qualcomm Closed Source Components Multiple Unspecified Vulnerabilities
Description Qualcomm Closed-Source Components are prone to multiple unspecified vulnerabilities. An attacker can exploit these issues to perform unauthorized actions. This may aid in further attacks. These issues are being tracked by Android Bug IDs A-122474427, A-129766175, A-129765090,...
Apache Hadoop CVE-2018-11768 Memory Corruption Vulnerability
Description Apache Hadoop is prone to a memory-corruption vulnerability. A remote attacker may exploit this issue to crash the server resulting in a denial-of-service condition. Technologies Affected Apache Hadoop 2.0.0 Alpha Apache Hadoop 2.0.0-alpha Apache Hadoop 2.0.1 Alpha Apache Hadoop 2.0.2...
Multiple Dell EMC Products CVE-2019-3765 Remote Security Bypass Vulnerability
Description Multiple Dell EMC products are prone to a remote security-bypass vulnerability. An attacker can exploit this issue to obtain sensitive information, bypass security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are vulnerable: De...
Multiple Cisco Unified Communications Products Cross Site Request Forgery Vulnerability
Description Multiple Cisco Unified Communications Products are prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the...
Cisco Unified Communications Manager CVE-2019-15272 Security Bypass Vulnerability
Description Cisco Unified Communications Manager is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. This issue is tracked by Cisco Bug ID CSCvp14434...
Multiple Cisco Products CVE-2019-12678 Denial of Service Vulnerability
Description Multiple Cisco Products are prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected device, denying service to legitimate users This issue is being tracked by Cisco Bug ID CSCvp45882. Technologies Affected Cisco Adaptive Security Appliance AS...
Cisco Firepower Management Center CVE-2019-12691 Directory Traversal Vulnerability_
Description Cisco Firepower Management Center is prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to access and write arbitrary files or to execute arbitrary files or gain sensitive information. This issue is being tracked...
Cisco Unified Communications Manager CVE-2019-12716 Cross Site Scripting Vulnerability
Description Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Cisco Firepower Management Center CVE-2019-12690 Command Injection Vulnerability
Description Cisco Firepower Management Center is prone to a command-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands on the underlying OS with root privileges. This issue is being tracked by Cisco Bug ID CSCvh03962. Technologies Affected Cisco FirePOWER...
Cisco Unified Communications Manager CVE-2019-12715 Cross Site Scripting Vulnerability
Description Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Cisco Firepower Management Center Multiple Remote Code Execution Vulnerabilities
Description Cisco Firepower Management Center is prone to multiple remote code-execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code on the affected system. This may aid in further attacks. These issues are being tracked by Cisco Bug IDs CSCvf87540 and...
Cisco Unified Contact Center Express CVE-2019-15259 HTTP Response Splitting Vulnerability
Description Cisco Unified Contact Center Express is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a...
Multiple Cisco Products CVE-2019-12698 Denial of Service Vulnerability
Description Multiple Cisco Products are prone to a denial-of-service vulnerability. Successful exploitation of the issue will cause excessive CPU resource consumption, resulting in a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCvp76944. Technologies Affected Cisco...
ZmartZone 'mod_auth_openidc' Module Open Redirection Vulnerability
Description ZmartZone modauthopenidc Module is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this...
Cisco Prime Infrastructure CVE-2019-12712 Cross Site Scripting Vulnerability
Description Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Cisco Firepower Management Center CVE-2019-12689 Remote Code Execution Vulnerability
Description Cisco Firepower Management Center is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code on the affected system with root privileges. This may aid in further attacks. This issue being tracked by Cisco Bug ID CSCvh03951...
Palo Alto Networks Zingbox Inspector CVE-2019-15015 Hardcoded Credentials Vulnerability
Description Palo Alto Networks Zingbox Inspector is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable system and perform unauthorized actions. Palo Alto Networks Zingbox Inspector version 1.294 and prior are vulnerabl...