11759 matches found
The vulnerability of the kvm_ioctl_create_device function in Linux operating system kernels allows a hacker to trigger a service failure.
The vulnerability of the kvmioctlcreatedevice function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the vRealize Log Insight log management tool, related to authentication errors, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the vRealize Log Insight log management tool is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the cdrom_ioctl_drive_status() function in Linux operating systems, which allows a hacker to gain unauthorized access to protected information
The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the ISDN function implementations in Cisco IOS and Cisco IOS XE operating systems allows a intruder to trigger a service failure.
The vulnerability of ISDN operating system functions in Cisco IOS and Cisco IOS XE exists due to errors in processing certain values in the Q.931 elements. Exploiting this vulnerability can allow an attacker to trigger a device reboot, resulting in service failure...
The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.
The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...
The vulnerability of the McAfee Application and Change Control control mechanism, related to errors in the implementation of the “blacklist” mechanism, allows a perpetrator to execute arbitrary code.
The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the “blacklist” mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on file execution and execute arbitrary code...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader 2017 Security Updates (APSB19-17) - Windows
Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability
SAP Crystal Reports for Visual Studio is the German SAP SAP company's set of Crystal report design software for Visual Studio development platform. An information disclosure vulnerability exists in SAP Crystal Reports for Visual Studio, which arises from errors such as configuration during...
Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-10456)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge that originates from errors such as configuration during operation of a networked system or product. An unauthorized...
GHSA-926Q-WXR6-3CRQ Moderate severity vulnerability that affects roundup
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
Moderate severity vulnerability that affects roundup
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
PT-2019-1776 · Microsoft · Chakracore +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...
Apple Safari < 12.0.3 Multiple Vulnerabilities
Binary data 700508.prm...
CVE-2019-10904
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
CVE-2019-10904
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
CVE-2019-10904
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...
CVE-2019-10904
CVE-2019-10904 affects Roundup 1.6: XSS via the URI caused by improper 404 handling in the web front-end, specifically in frontend/roundup.cgi and roundup/cgi/wsgi_handler.py. Practical impact is client-side code execution due to crafted URIs. Exploitation details are not provided in the supplied...