Cisco Adaptive Security Appliances SIP DoS

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense FTD is related to errors in processing SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

FTD Multi-connection Mode Privilege Escalation

The vulnerability of the multi-connection mode of the Firepower Threat Defense FTD software relates to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges from within the FTD instance...

Cisco Firepower Management Center SQL Injection

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Firefox Display Error Spear Phishing

The vulnerability of Firefox browsers arises due to errors in the character display in file names within the “Downloads” tab. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

baseURI component Data Compromise

The vulnerability of the baseURI component in browsers such as Firefox ESR, Firefox, and the email client Thunderbird is related to permission handling errors. Exploiting this vulnerability can allow a malicious actor to influence the integrity of protected information from a remote location...

Cisco Firepower Management Center SQL Injection

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender arises due to file processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Norton Password Manager Module IP Address Replacement

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

PT-2019-3632

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context ...

PT-2019-3637

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

PT-2019-3638

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

PT-2019-3640

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

Code injection

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an...

CVE-2009-0136

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...

Fedora 30 : glpi (2019-a1636592a3)

GLPI version 9.4.4 This is a security release, upgrading is highly recommended Non exhaustive list of changes : - security Prevent account takeover vulnerability , - security Prevent execution of XSS on rich text, - fix cache key lenght issues, - fix user picture removal at login, - several fixes...

Firefox Thunderbird IPC Error Information Disclosure

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to process-interaction errors. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information...

Firefox Thunderbird HTTP Live Streaming Data Compromise

The vulnerability in the implementation of the HTTP Live Streaming protocol for Firefox and Firefox ESR browsers, as well as the Thunderbird email client for Android, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine database management system for the Windows operating system exists due to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Cisco IOS DoS

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...