The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2019-5958

Name of the Vulnerable Software and Affected Versions Andover Continuum versions 9680, 5740, 5720, bCX4040, bCX9640, 9900, 9940, 9924, and 9702 Description The issue is related to the lack of input data sanitization, which can lead to Cross-site Scripting XSS attacks. This could allow a remote...

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

DEBIAN-CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

Design/Logic Flaw

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

Loop with Unreachable Exit Condition (Infinite Loop)

In Apache Thrift, a server or client may run into an endless loop when feed with specific input data...

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

CVE-2019-0205

CVE-2019-0205 affects Apache Thrift up to version 0.12.0, where a server or client may enter an endless loop when fed specific input data. The issue was partially fixed in 0.11.0, and depending on the language binding, only certain bindings are impacted. Exploitation details are not provided in t...

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

PT-2019-4303

Name of the Vulnerable Software and Affected Versions SAP Customer Relationship Management versions prior to 1.0 and 2.0 SAP Customer Relationship Management Email Management versions prior to 7.0, excluding 7.0, 7.01, 7.02, 7.12, 7.13, and 7.14 Description The issue is related to the lack of inp...

The vulnerability of Cisco IOS and Cisco IOS XE operating systems, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting attacks.

The vulnerability of Cisco IOS and Cisco IOS XE systems is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform domain-to-domain scenario attacks using the HTTP banner parameter...

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures for cleaning input data, allows attackers to perform domain-based scenario attacks.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to perform domain-joining attacks...

The embedded software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is vulnerable due to insufficient testing of input data. This vulnerability allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, expose sensitive information, or cause system failures...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...

Sql injection

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-e...

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) arises from insufficient validation of input data, allowing attackers to disclose sensitive information that should be protected.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS exists due to insufficient testing of input data. Exploiting this vulnerability could allow a attacker to disclose protected information...

The vulnerability of the NX-API network operating system in Cisco NX-OS routers allows a attacker to induce a service failure.

The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...