11758 matches found
Information Disclosure Vulnerability in Multiple Qualcomm Products (CNVD-2019-13771)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An information disclosure vulnerability exists in multiple Qualcomm products. The vulnerability arises fro...
Security update for hostinfo, supportutils (important)
openSUSE Security Update: Security update for hostinfo, supportutils Announcement ID: openSUSE-SU-2019:1351-1 Rating: important References: 1054979 1099498 1115245 1117751 1117776 1118460 1118462 1118463 1125623 1125666 Cross-References: CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639...
The vulnerability of the implementation of the ResourceHttpRequestHandler class in the Spring Framework’s software platform allows a perpetrator to trigger a service failure.
The vulnerability of the ResourceHttpRequestHandler implementation in the Spring Framework’s software platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog and InfoSphere Information Server on Cloud Information Disclosure Vulnerabilities
IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog, and InfoSphere Information Server on Cloud are products of IBM USA. An information disclosure vulnerability exists in IBM InfoSphere Information Analyzer, InfoSphere Information Governance Catalog, and InfoSphere...
Arbitrary Code Execution
Firefox, Firefox ESR and Thunderbird are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable Memory Handler component to execute arbitrary code via various memory errors which may occur...
Buffer Overflow
The X11 Xorg libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol da...
PT-2019-2059 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A vulnerability in the remote access VPN session manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on...
The vulnerability of the jdhcpd daemon in the Junos OS operating system, which allows a hacker to cause a service failure.
The vulnerability of the jdhcpd daemon in the Junos OS operating system is related to resource management errors. Exploiting this vulnerability can allow a attacker to cause service failures...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
The vulnerability of Junos OS’ firewall filter configuration allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Junos OS’ firewall filter configuration is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
The vulnerability of the command-line interface of microprogramming software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, and 3800 allows a attacker to gain access to the built-in operating system.
The vulnerability of the command-line interface of microprogramming software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, and 3800 is related to configuration errors. Exploiting this vulnerability can allow an attacker to gain access to the built-in Linux operating system...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
SUSE-SU-2018:3467-2 Security update for smt
SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...
Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
The vulnerability of the Twig template compiler, related to errors in isolated software environments, allows attackers to gain access to confidential data.
The vulnerability of the Twig template compiler relates to errors in a isolated programming environment. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the CUPS printing server, related to authentication errors, allows a perpetrator to gain access to confidential data.
The vulnerability of the CUPS printing server is related to the improper handling of certain include directives. This allows unprivileged users to gain access to and read arbitrary files from the superuser’s perspective. Exploiting this vulnerability enables a perpetrator to gain access to...
The vulnerability of the nginx web server module in Phusion Passenger, related to the simultaneous use of shared resources and synchronization errors, allows attackers to gain access to confidential data.
The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...
The vulnerability of Systemd demons, related to the simultaneous use of shared resources and synchronization errors, allows a perpetrator to trigger a service failure.
The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the mod_auth_mellon authentication module in the Apache HTTP Server, related to character conversion errors involving the “\” character, allows attackers to redirect users to malicious websites.
The vulnerability of the modauthmellon authentication module in the Apache HTTP Server is related to a character conversion error involving the “\” symbol. Exploiting this vulnerability could allow an attacker to redirect users to a malicious website remotely...