The vulnerability of the authentication function of the Cisco NX-OS network operating system for Cisco Nexus 9000 switches allows a hacker to escalate their privileges.

The vulnerability of the authentication function of the Cisco NX-OS network operating system for Cisco Nexus 9000 series switches is related to configuration errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the control interface for Cisco NX-OS network operating system routers allows attackers to escalate their privileges.

The vulnerability of the control interface for Cisco NX-OS network operating system routers relates to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the PowerOn Auto Provisioning (POAP) mechanism in the network operating system of Cisco NX-OS switches allows a perpetrator to gain access to other devices.

The vulnerability of the PowerOn Auto Provisioning POAP mechanism in the network operating system of Cisco NX-OS switches involves errors during the automated device deployment process. Exploiting this vulnerability allows a malicious actor to download and execute malicious configuration scenario...

FreeBSD : RubyGems -- multiple vulnerabilities (27b12d04-4722-11e9-8b7c-b5e01141761f)

RubyGems Security Advisories : CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability in 'verbose' CVE-2019-8322: Escape sequence injection vulnerability in 'gem owner' CVE-2019-8323: Escape sequence injection vulnerability in A...

CVE-2018-19513

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sqlerrorlog/YYYY-MM-DD-sqlerrorlog.log filenames. The log file could contain sensitive client data email addresses and also facilitates exploitation of SQL injection errors...

DEBIAN-CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

Integer overflow

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

UBUNTU-CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20175

CVE-2018-20175 affects rdesktop up to and including v1.8.3. The vulnerability stems from several Integer Signedness errors in mcs.c that cause Out-of-Bounds Reads, leading to Denial of Service (segfault). Connected advisories confirm the issue across multiple distributions and indicate fixes in l...

Moderate: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

PHP 5.6.x < 5.6.40 Multiple vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40, 7.1.x prior to 7.1.26, 7.2.x prior to 7.2.14 or 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc...

PHP 7.1.x < 7.1.26 Multiple vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40, 7.1.x prior to 7.1.26, 7.2.x prior to 7.2.14 or 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc...

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system is related to the lack of checking for the value of a pointer being set to NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the union data structure interpretation in Xen hypervisors, related to background data corruption, allows attackers to cause service failures or increase their privileges within the system.

The vulnerability of the union data structure interpretation in Xen hypervisors is related to errors during data underpressure situations. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges within the system...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript, related to type conversion errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to type conversion errors. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

GLSA-201903-02 : Zsh: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201903-02 Zsh: User-assisted execution of arbitrary code Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line...

PT-2019-2301 · Jenkins · Jenkins Matrix Project Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Matrix Project Plugin versions 1.13 and earlier Description: A sandbox bypass issue exists, related to errors in input data processing during code parsing in components such as pom.xml and FilterScript.java. This allows attackers with...

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of LBMPD devices in Wireshark, a network traffic analysis tool, allows attackers to cause service interruptions.

The vulnerability of LBMPDM dissectors wireshark/epan/dissectors/packet-lbmpdm.c, a traffic analyzer for computer networks in Wireshark, is related to errors in the processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially...