Siemens Simatic S7-1500 CPU Family DoS

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

Siemens SIMATIC S7-1500 CPU Family PLC DoS

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

SAP HANA Security Audit Log Bypass

The vulnerability of the Security Audit Log of the SAP HANA database management system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

Samba LDAP DoS

The vulnerability of the Samba network communication component’s LDAP server is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

HomeAutomation 3.3.2 Open Redirect

HomeAutomation v3.3.2 Open Redirect Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Summary: HomeAutomation is an open-source web interface and scheduling solution. It was initially made for use with the Telldus TellStick, but is now...

Hewlett-Packard Development Company L.P. EFI_BOOT_SERVICES Privilege Escalation

The vulnerability of the EFIBOOTSERVICES component in microprogramming software for desktop workstations, personal computers, and payment devices of Hewlett-Packard Development Company L.P exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote...

Wi-Fi WPA Supplicant DoS

The vulnerability of the Wi-Fi WPA Supplicant component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure...

Jackson-databind P6DataSource Information Disclosure

The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service failures...

Jackson-databind SharedPoolDataSource Information Disclosure

The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

Firefox Thunderbird ECDH DoS

The vulnerability of the p256-ECDH key generation function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

web interface of the Code Execution

The vulnerability in the web interface for managing Cisco Prime Infrastructure network equipment is related to insufficient verification of the data entered by users in several sections of the web interface. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain...

Advantech WebAccess File Deletion

The vulnerability of the library component .dll of the Advantech WebAccess monitoring software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to delete any file remotely...

CVE-2019-17455

A flaw was found in the libntlm NTLM library where it was vulnerable to a buffer overflow in the buildSmbNtlmAuthRequestuserlen function. If an application using this library does not check input length before calling the function, an attacker could use this flaw to send a specially crafted reque...

JunOS SRX1500 DoS

The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco Firepower Management Center Web Interface Code Execution

The vulnerability of the web interface of the Cisco Firepower Management Center FMC software management system exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote...

CylancePROTECT Analysis Mechanism Bypass

The vulnerability of the analysis mechanism for machine learning models used in antivirus protection software CylancePROTECT exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to introduce a malicious file by bypassing the protection...

V-SOL GPON/EPON OLT Platform v2.03 Link Manipulation Vulnerability

Summary GPON is currently the leading FTTH standard in broadband access technology being widely deployed by service providers around the world. GPON/EPON OLT products are 1U height 19 inch rack mount products. The features of the OLT are small, convenient, flexible, easy to deploy, high...