The vulnerability of the Cisco Webex Meetings Client and Cisco Webex Team software-related programs is related to deficiencies in access control, allowing attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Meetings Client and Cisco Webex Team software-related programs is related to errors in the mechanism for checking paths to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

Top 10 IoT Disasters of 2019

IoT Disasters 2019 Though more light was shed around insecure Internet of Things IoT devices in 2019 – consequently leading to more calls for regulation– connected devices themselves seemingly stayed just as insecure. From privacy concerns in smart home devices, to botnets evolving to launch...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to access control deficiencies, allows a hacker to elevate their privileges to the root level and execute arbitrary code.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level and execute arbitrary code...

The vulnerability of the Windows Certificate Dialog component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Certificate Dialog component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Hackers Could Use Smart Displays to Spy on Meetings

By exploiting flaws in popular video conferencing hardware from DTEN, attackers can monitor audio, capture slides—and take full control of devices...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the slapd package in OpenLDAP allows a intruder to disclose protected information.

The vulnerability of the slapd package in OpenLDAP is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the document-oriented MongoDB database management system, related to deficiencies in access control, allows a hacker to execute arbitrary code.

The vulnerability of the document-oriented MongoDB database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a special application...

The vulnerability of the Server:DDL component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:DDL component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

Race condition

eDeploy has tmp file race condition flaws...

Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities: An information leak which allowed to retrieve the guest hostname under readonly mode CVE-2019-3886. Wrong permissions in systemd admin-sock due to missing SocketMode parameter CVE-2019-10132. Arbitrary file read/exec via...

The vulnerability of the Intel Active System Console, related to deficiencies in access control, allows a intruder to escalate their privileges.

The vulnerability of the Intel Active System Console is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogrammed software of Intel Ethernet Series 700 controllers, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet Controller Series 700 microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the embedded microcontroller’s consumer driver, Intel Management Engine, and the microprogramming software Intel Trusted Execution Engine (TXE), allows a perpetrator to enhance their privileges.

The vulnerability of the embedded microcontroller’s consumer driver, Intel Management Engine for Windows, and Intel Trusted Execution Engine TXE software, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the System Management Mode (SMM) component of Intel microprogramming systems, related to access control deficiencies, allows attackers to disclose protected information.

The vulnerability of the System Management Mode SMM component of Intel microprocessors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of Intel Active Management Technology’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute cross-site scripting XSS attacks...

The vulnerability of the web interface of D-Link DAP-1320 A2 microprogramming software for wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DAP-1320 A2 wireless router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the SS...

The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of backup and data restoration operations for software that manages virtual infrastructure like VMware vCenter Server Appliance is related to deficiencies in verifying the authenticity of certificates. Exploiting this vulnerability can allow an attacker,...