The vulnerability of the difflib.IS_LINE_JUNK method in the Python interpreter allows a attacker to cause a service failure.

The vulnerability of the difflib.ISLINEJUNK method in the Python interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Sender Policy Framework (SPF) component of the Cisco AsyncOS operating system in the Cisco Email Security Appliance allows a hacker to bypass user-defined filters on a vulnerable device.

The vulnerability of the Sender Policy Framework SPF component of the Cisco AsyncOS operating system for the Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass user-defined filters on the vulnerable...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

Unspecified Vulnerability in Intel Converged Security and Management Engine (CNVD-2019-42599)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Intel Active Management Technology Information Disclosure Vulnerability

Intel Active Management Technology AMT is an embedded system from the U.S. company Intel Intel that is integrated into the Intel chip and uses active management technology. A security vulnerability exists in a subsystem in Intel AMT that stems from inadequate input validation. An attacker could...

Buffer overflow

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

The vulnerability of the Neighbor Discovery protocol implementation in Cisco IOS XE, IOS XR, NX-OS, and StarOS operating systems allows a attacker to cause service failure.

The vulnerability of the Neighbor Discovery ND protocol implementation in Cisco IOS XE, IOS XR, NX-OS, and StarOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted N...

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to cause partial service interruption.

The vulnerability of the Oracle Java SE 2D software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause partial service interruptions remotely...

The vulnerability of the standard command-line utility package for the Debian GNU/Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in Cisco TelePresence Collaboration Endpoint CE versions prior to 9.8.1 due to improper input validation. An attacker can exploit the vulnerability to perform command injection by logging in as an administrator...

Palo Alto Networks Zingbox Inspector Command Injection Vulnerability (CNVD-2019-36667)

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.293 and earlier. The vulnerability arises from a...

Cisco SPA100 Remote Code Execution Vulnerability (CNVD-2019-36886)

The Cisco SPA100 Series is an analog phone adapter from Cisco that allows your standard analog phone to access Internet telephony services through an RJ-11 phone port. A remote code execution vulnerability exists in the Cisco SPA100 Series with firmware 1.4.1 SR4 and earlier. The vulnerability...

CVE-2019-15277

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, local attacker to execute code with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as the...

CVE-2019-12703

A vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices could allow an unauthenticated, adjacent attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface...

SugarCRM Quotes Module SQL Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the Quotes module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...

SugarCRM SQL Injection Vulnerability (CNVD-2019-34416)

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the history feature of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to inject custom PHP code...

SugarCRM PHP code injection vulnerability (CNVD-2019-34421)

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the MergeRecords module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...