Intel Active Management Technology Information Disclosure Vulnerability

Intel Active Management Technology AMT is an embedded system from the U.S. company Intel Intel that is integrated into the Intel chip and uses active management technology. A security vulnerability exists in a subsystem in Intel AMT that stems from inadequate input validation. An attacker could...

Buffer overflow

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

The vulnerability of the Neighbor Discovery protocol implementation in Cisco IOS XE, IOS XR, NX-OS, and StarOS operating systems allows a attacker to cause service failure.

The vulnerability of the Neighbor Discovery ND protocol implementation in Cisco IOS XE, IOS XR, NX-OS, and StarOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted N...

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to cause partial service interruption.

The vulnerability of the Oracle Java SE 2D software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause partial service interruptions remotely...

The vulnerability of the standard command-line utility package for the Debian GNU/Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in Cisco TelePresence Collaboration Endpoint CE versions prior to 9.8.1 due to improper input validation. An attacker can exploit the vulnerability to perform command injection by logging in as an administrator...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

Cisco SPA100 Remote Code Execution Vulnerability (CNVD-2019-36886)

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A remote code execution vulnerability exists in the Cisco SPA100 Series with firmware 1.4.1 SR4 and earlier. The vulnerability...

CVE-2019-15277

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, local attacker to execute code with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as the...

CVE-2019-12703

A vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices could allow an unauthenticated, adjacent attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface...

SugarCRM Quotes Module SQL Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the Quotes module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...

SugarCRM Administration Module PHP Code Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...

SugarCRM PHP code injection vulnerability (CNVD-2019-34421)

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the MergeRecords module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...

SugarCRM SQL Injection Vulnerability (CNVD-2019-34416)

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the history feature of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to inject custom PHP code...

CVE-2019-13325

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the RADIUS Change of Authorization (CoA) function in the Cisco TrustSec network security management system allows a perpetrator to trigger a service failure.

The vulnerability of the RADIUS Change of Authorization CoA function in the Cisco TrustSec network security system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...