CVE-2019-15976

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these...

Fedora 30 : git (2019-1cec196e20)

Per the upstream release announcement¹, this release fixes 'various security flaws, which allowed an attacker to overwrite arbitrary paths, remotely execute code, and/or overwrite files in the .git/ directory etc. See the release notes attached for the list for their descriptions and CVE...

The vulnerability of the McAfee Advanced Threat Defense software arises from insufficient validation of input data, allowing a perpetrator to gain unauthorized access to the atduser account information.

The vulnerability of the McAfee Advanced Threat Defense security tool exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain unauthorized access to the atduser account through specially crafted GET requests...

The vulnerability of the Cisco Webex Meetings Client and Cisco Webex Team software-related programs is related to deficiencies in access control, allowing attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Meetings Client and Cisco Webex Team software-related programs is related to errors in the mechanism for checking paths to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to access control deficiencies, allows a perpetrator to send arbitrary requests to the server through the PI Axis adapter.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the server through the PI Axis adapter...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors D allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information.

Vulnerability of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors: exploitation may allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

Top 10 IoT Disasters of 2019

IoT Disasters 2019 Though more light was shed around insecure Internet of Things IoT devices in 2019 – consequently leading to more calls for regulation– connected devices themselves seemingly stayed just as insecure. From privacy concerns in smart home devices, to botnets evolving to launch...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to access control deficiencies, allows a hacker to elevate their privileges to the root level and execute arbitrary code.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level and execute arbitrary code...

The vulnerability of the Windows Certificate Dialog component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Certificate Dialog component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Hackers Could Use Smart Displays to Spy on Meetings

By exploiting flaws in popular video conferencing hardware from DTEN, attackers can monitor audio, capture slides—and take full control of devices...

The vulnerability of the document-oriented MongoDB database management system, related to deficiencies in access control, allows a hacker to execute arbitrary code.

The vulnerability of the document-oriented MongoDB database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a special application...

The vulnerability of the slapd package in OpenLDAP allows a intruder to disclose protected information.

The vulnerability of the slapd package in OpenLDAP is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Server:DDL component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:DDL component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Race condition

eDeploy has tmp file race condition flaws...

Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities: An information leak which allowed to retrieve the guest hostname under readonly mode CVE-2019-3886. Wrong permissions in systemd admin-sock due to missing SocketMode parameter CVE-2019-10132. Arbitrary file read/exec via...

The vulnerability of the System Management Mode (SMM) component of Intel microprogramming systems, related to access control deficiencies, allows attackers to disclose protected information.

The vulnerability of the System Management Mode SMM component of Intel microprocessors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the microprogrammed software of Intel Ethernet Series 700 controllers, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet Controller Series 700 microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...