The vulnerability of the PostgreSQL database management system, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of the PostgreSQL database management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...

The vulnerability of the RichFaces library, related to errors in code generation, allows attackers to execute arbitrary Java code.

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

openSUSE Security Update : nextcloud (openSUSE-2019-640)

This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...

The vulnerability of the Windows operating system, related to resource release errors, allows a perpetrator to cause a service failure.

The vulnerability of the Windows operating system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines.

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines. As per the CDF logs uploaded, there found exceptions related to communication for Get-ProvTask execution. 261057,0,2019/03/18 13:19:16:45184,6716,2288,1,Xendesktop...

Fedora 29 : libssh2 (2019-f31c14682f)

This update addresses various overflow conditions that could result in possible memory read/write out of bounds errors or zero byte allocations when connected to a malicious server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

The vulnerability of the network stack implementation in Cisco NX-OSS devices allows a hacker to induce a service failure.

The vulnerability of the network stack implementation in Cisco NX-OSS devices relates to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the application programming interface for accessing ActiveX Data Objects (ADO) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of Microsoft Edge and Internet Explorer involve memory object processing errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer exist due to errors in memory object handling. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

The vulnerability of the virtualization protocol implementation in the Cisco NX-OS network operating system for Cisco Nexus 9000 routers allows a attacker to cause service interruptions.

The vulnerability of the N-port virtualization protocol implementation in the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions by directing FCo...

The vulnerability of the authentication function of the Cisco NX-OS network operating system for Cisco Nexus 9000 switches allows a hacker to escalate their privileges.

The vulnerability of the authentication function of the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to configuration errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the PowerOn Auto Provisioning (POAP) mechanism in the network operating system of Cisco NX-OS switches allows a perpetrator to gain access to other devices.

The vulnerability of the PowerOn Auto Provisioning POAP mechanism in the network operating system of Cisco NX-OS switches involves errors during the automated device deployment process. Exploiting this vulnerability allows a malicious actor to download and execute malicious configuration scenario...

The vulnerability of the control interface for Cisco NX-OS network operating system routers allows attackers to escalate their privileges.

The vulnerability of the control interface for Cisco NX-OS network operating system routers relates to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges...

FreeBSD : RubyGems -- multiple vulnerabilities (27b12d04-4722-11e9-8b7c-b5e01141761f)

RubyGems Security Advisories : CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in 'verbose' CVE-2019-8322: Escape sequence injection vulnerability in 'gem owner' CVE-2019-8323: Escape sequence injection vulnerability in A...

CVE-2018-19513

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...

DEBIAN-CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

Integer overflow

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...