CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

CVE-2019-10904: Improper Neutralization of Input During Web Page Generation

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

PostgreSQL Authentication Privilege Escalation

The vulnerability of the PostgreSQL database management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...

RichFaces Arbitrary Java Code Execution

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...

openSUSE Security Update : nextcloud (openSUSE-2019-640)

This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...

Windows Resource Release DoS

The vulnerability of the Windows operating system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

Microprogrammable Software-based Intel Converged Security and Manageability Engine Authentication Bypass

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines.

Virtual Desktops 7.15 CU3 - On Studio - Machine catalogs, keeps spinning for long time and never displays the list of the machines. As per the CDF logs uploaded, there found exceptions related to communication for Get-ProvTask execution. 261057,0,2019/03/18 13:19:16:45184,6716,2288,1,Xendesktop...

Fedora 29 : libssh2 (2019-f31c14682f)

This update addresses various overflow conditions that could result in possible memory read/write out of bounds errors or zero byte allocations when connected to a malicious server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Cisco NX-OSS DoS

The vulnerability of the network stack implementation in Cisco NX-OSS devices relates to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco NX-OS Privilege Escalation

The vulnerability of the control interface for Cisco NX-OS network operating system routers relates to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges...

Cisco NX-OS PowerOn Auto Provisioning Access

The vulnerability of the PowerOn Auto Provisioning POAP mechanism in the network operating system of Cisco NX-OS switches involves errors during the automated device deployment process. Exploiting this vulnerability allows a malicious actor to download and execute malicious configuration scenario...

Microsoft Edge and Internet Code Execution

The vulnerabilities of Microsoft Edge and Internet Explorer exist due to errors in memory object handling. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...

Microsoft Hyper-V Network Switch DoS

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

Cisco NX-OS Virtualization Protocol DoS

The vulnerability of the N-port virtualization protocol implementation in the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions by directing FCo...

Cisco NX-OS Privilege Escalation

The vulnerability of the authentication function of the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to configuration errors. Exploiting this vulnerability can allow attackers to increase their privileges...

ActiveX Data Objects Code Execution

The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

FreeBSD : RubyGems -- multiple vulnerabilities (27b12d04-4722-11e9-8b7c-b5e01141761f)

RubyGems Security Advisories : CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in 'verbose' CVE-2019-8322: Escape sequence injection vulnerability in 'gem owner' CVE-2019-8323: Escape sequence injection vulnerability in A...

CVE-2018-19513

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...