The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series router microprogramming systems allows a attacker to induce a service failure.

The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series routers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted DHCP packets...

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Fedora Update for dhcp FEDORA-2019-0370ad8310

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for bind-dyndb-ldap FEDORA-2019-0370ad8310

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.

The vulnerability of the Intel Dynamic Application Loader DAL subsystem of the Intel Converged Security and Manageability Engine CSME is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

[SECURITY] Fedora 29 Update: bind-dyndb-ldap-11.1-15.fc29

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

CVE-2019-12177

Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking...

The vulnerability of the roaming_read and roaming_write functions in the OpenSSH cryptographic security tool allows a hacker to induce a service failure.

The vulnerability of the roamingread and roamingwrite functions in the OpenSSH cryptographic protection mechanism arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a malicious actor to cause a service failure from a remote location...

The vulnerability of the synchronization identifier application in the Cisco Directory Connector lies in errors in the path validation mechanism, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the application for synchronizing identifiers in the Cisco Directory Connector is related to errors in the mechanism for checking the path of dynamically attached libraries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability of the `load_device_tree` function in the QEMU hardware emulation software allows a hacker to execute arbitrary code.

The vulnerability of the loaddevicetree function in the QEMU hardware emulation software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Schneider Electric Twidosuite software suffers from a dll hijacking vulnerability when processing xpr files

Schneider Electric Twidosuite is a programming software. The Schneider Electric Twidosuite software is vulnerable to a dll hijacking vulnerability when processing xpr files. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-5589

An Unsafe Search Path vulnerability in FortiClient Online Installer Windows version before 6.0.6 may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files...

CVE-2019-12361

EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page...

Cross site request forgery (csrf)

EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page...

CVE-2019-12361

EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page...

The original Java deserialization remote execution vulnerabilities so simple-vulnerability warning-the black bar safety net

Here we for Java deserialization issue caused remote code execution vulnerability principles are introduced. In order to simplify the description,without introducing a 3rd party library under the premise of the Operation, HOPE can serve to initiate the effect. There are 3 main parts: The Java...

The vulnerability of the RPCbind RPC ports in dynamic configuration servers arises from insufficient validation of input data. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the RPCbind RPC ports for dynamic services exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

Schneider Electric VideoXpert OpsCenter Code Issue Vulnerability

Schneider Electric VideoXpert OpsCenter is a suite of enterprise surveillance video management platforms from Schneider Electric France. A code issue vulnerability exists in Schneider Electric VideoXpert OpsCenter. An attacker could exploit this vulnerability to conduct DLL hijacking...

Intel Dynamic Application Loader Buffer Overflow Vulnerability

Intel Dynamic Application Loader DAL is a dynamic application loader from Intel Corporation USA. It supports running Java code on CSME firmware. A buffer overflow vulnerability exists in the subsystem in Intel DAL versions prior to 12.0.35. The vulnerability stems from a networked system or produ...

[SECURITY] Fedora 28 Update: qemu-2.11.2-5.fc28

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...