WordPress flog cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress flog version 0.1. The vulnerability stems from a lack...

The vulnerability of the FreeBSD operating systems arises from insufficient validation of input data, allowing attackers to overwrite memory on the bhyve host or execute arbitrary code under the control of the root user.

The vulnerability of the FreeBSD operating systems exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to remotely rewrite memory on the bhyve host or execute arbitrary code under the identity of the root user...

The vulnerability of Huawei routers stems from insufficient validation of input data. This allows attackers to gain access to arbitrary files and upload those files onto vulnerable devices.

The vulnerability of Huawei routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to gain access to arbitrary files and upload those files to the vulnerable device...

CVE-2019-11100

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2019-11088

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

The vulnerability of the fds_sys_passDebugPasswd_ret() function in the libfds.so library of the Zyxel GS1900 series router microprogramming software allows a attacker to escalate their privileges.

The vulnerability of the fdssyspassDebugPasswdret function in the libfds.so library of the Zyxel GS1900 series router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion allows a hacker to trigger a service failure.

The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services, is related to insufficient validation of input data. Exploiting...

CVE-2019-2231

In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...

CVE-2019-7193

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of Google Chrome’s Blink rendering module exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information through a specially created HT...

The vulnerability of Google Chrome arises from insufficient validation of input data, allowing a hacker to conceal a notification indicating a transition to full-screen mode.

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to conceal a notification indicating that the system has switched to full-screen mode using a specially created HTML page...

The vulnerability of the ReadDCMImage function (coders/dcm.c) and the ReadPICTImage function (coders/pict.c) in the console-based graphic editor ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadDCMImage function coders/dcm.c and ReadPICTImage function coders/pict.c in the console-based graphic editor ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service...

The vulnerability of the difflib.IS_LINE_JUNK method in the Python interpreter allows a attacker to cause a service failure.

The vulnerability of the difflib.ISLINEJUNK method in the Python interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Sender Policy Framework (SPF) component of the Cisco AsyncOS operating system in the Cisco Email Security Appliance allows a hacker to bypass user-defined filters on a vulnerable device.

The vulnerability of the Sender Policy Framework SPF component of the Cisco AsyncOS operating system for the Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass user-defined filters on the vulnerable...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

Unspecified Vulnerability in Intel Converged Security and Management Engine (CNVD-2019-42599)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...