PT-2019-2883

Name of the Vulnerable Software and Affected Versions libvirtd versions prior to 4.10.1 libvirtd versions prior to 5.4.1 Description The issue is related to the virDomainSaveImageGetXMLDesc API, which has access control errors. This allows an attacker with access to the libvirtd socket to probe t...

IBM Cognos Controller Information Disclosure Vulnerability

IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM in the United States. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM Cognos...

Modicon Access Control RCE

The vulnerability of the microprogrammed programmable logic controller Modicon is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by modifying the controller’s configuration using the Modbus protocol...

Microsoft Internet Information Services DoS

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Webex Meetings Server Information Disclosure

The vulnerability of the Cisco Webex Meetings Server’s web interface management software is related to configuration errors. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created request...

Cisco TelePresence Video Communication Server Network Service Restriction Data Compromise

The vulnerability of the software on Cisco TelePresence Video Communication Server and Cisco Expressway Series conference communication devices is related to errors in network service restrictions. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

CocoaDebug - iOS Debugging Tool

iOS Debugging Tool Shake to hide or show the black bubble. support both device and simulator Long press the black bubble to show UIDebuggingInformationOverlay. Apple's Private API, support iOS 10/11/12 Application memory usage and FPS. List all print and NSLog messages which have been written by...

PowerShell Windows Privilege Escalation

The vulnerability of PowerShell command interpreters in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

Microsoft SharePoint Security Configuration Code Execution

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created page in the vulnerable version of Microsof...

ASP.NET Core DoS

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the ASP.NET Core application...

Microsoft Dynamics Security Configuration Bypass

The vulnerability of the Microsoft Dynamics resource planning software is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on email attachments by intercepting POST requests...

LIGO! Soft Comfort Access Control Code Execution

The vulnerability of the LOGO! Soft Comfort development software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon opening a specially crafted project...

Cisco Firepower Management Center SSL/TLS Syntax Analyzer Bypass Access Control

The vulnerability in the syntax analyzer of Cisco Firepower Management Center’s network management software for Secure Sockets Layer SSL and Transport Layer Security TLS protocols is related to errors in analyzing attributes in TLS packet headers. Exploiting this vulnerability can allow a malicio...

Jenkins Matrix Project Code Execution

The vulnerability of the pom.xml components and FilterScript.java src/main/java/hudson/matrix/FilterScript.java of the Matrix Project plugin is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow a malicious actor to exit the...

Kerberos Protocol Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the authentication mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

Modicon DoS

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in handling exceptional situations. Exploiting this vulnerability can allow an intruder, operating remotely, to cause malfunctions during the reading of memory blocks with invalid data sizes or wit...

SAP HANA Extended Application Services Information Disclosure Vulnerability (CNVD-2019-34744)

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...

PT-2019-2620

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft browsers affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execut...

electricflow globally and unconditionally disabled SSL/TLS certificate validation

electricflow unconditionally disabled SSL/TLS certificate validation for the entire Jenkins controller JVM during the deployment/publication of an application. electricflow no longer does that. Instead, the existing opt-in option to ignore SSL/TLS errors is used during deployment for the specific...

PT-2019-2378

Name of the Vulnerable Software and Affected Versions Microsoft IIS Server affected versions not specified Description A denial of service issue exists in Microsoft IIS Server due to improper handling of requests by the optional request filtering feature. This can be exploited by a remote attacke...