CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

The vulnerability of the Intel Converged Security and Manageability Engine implementation, which stems from insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Cisco IOS and IOS XE Input Validation Vulnerability (CNVD-2019-08717)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Network-Based Application Recognition NBAR feature in Cisco IOS and IOS XE, which stems from a parsing problem in the program that could be exploited by ...

Cisco IOS and IOS XE Input Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Network-Based Application Recognition NBAR feature in Cisco IOS and IOS XE, which stems from a parsing problem in the program that could be exploited by ...

Intel Graphics Driver for Windows Kernel Mode Driver Arbitrary Code Execution Vulnerability (CNVD-2019-26188)

Intel Graphics Driver for Windows is an Intel graphics driver for the Windows platform.Kernel Mode Driver is one of the kernel mode drivers. A security vulnerability exists in the Kernel Mode Driver of the Intel Graphics Driver for Windows platforms, which arises from the program failing to perfo...

The vulnerability of the Cluster Service Manager component in Cisco HyperFlex hyperconverged infrastructure allows a attacker to execute arbitrary commands.

The vulnerability of the Cluster Service Manager component in the Cisco HyperFlex hyperconverged infrastructure is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Pixar Renderman Input Validation Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Helper tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to read the root file from...

CVE-2019-1614

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

CVE-2019-1605

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTT...

Cisco Nexus 9000 ACI Mode Arbitrary File Read Vulnerability

The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. An arbitrary file read vulnerability exists in the Cisco Nexus 9000 Series ACI mode switches. The vulnerability stems from the lack of a proper input and validation checking mechanism for...

The vulnerability of the WEB interface of the microprogramming software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough checks. A local attacker may trigger this flaw by sending a dbus message to systemd with a large path making systemd crash or possibly elevating his privileges...

The vulnerability of the scp file copy-to-external utility implementation lies in insufficient validation of input data, allowing a malicious actor to manipulate files in the client’s directory.

The vulnerability of the scp file copy utility implementation is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely from the server, to manipulate files in the client directory...

PT-2019-6344 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 2.10 Description: The issue is related to the lack of input validation in the firmware of D-Link DIR-825 routers. This can be exploited by a remote attacker to execute arbitrary commands by sending a specially crafted...

The vulnerability of the Snort Rules configuration component of the Juniper ATP intrusion prevention system allows a perpetrator to inject arbitrary JavaScript code into the uploaded page and gain access to the protected data.

The vulnerability of the Snort Rules configuration component of the Juniper ATP intrusion prevention system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the uploaded page and gain access to...

The vulnerability of the CLI component of Cisco Enterprise Network Function Virtualization Infrastructure (NFVIZ) software allows a attacker to access system configuration files.

The vulnerability of the CLI component of Cisco Enterprise Network Function Virtualization Infrastructure NFVIZ software lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to access system configuration files through a specially crafted request...

The vulnerability of the parse_group_prop_ntr_selection_method method in the Open vSwitch software multi-level switch allows a attacker to cause a service failure.

The vulnerability of the parsegrouppropntrselectionmethod method lib/ofp-util.c in the Open vSwitch OvS software multi-level switch exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8976)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to an input validation flaw when processing parameter. Successful exploitation could result in arbitrary code execution...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2020-14718)

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides reports related to business data and call center data presentation capabilities. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center...

The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP packets...