cPanel cross-site scripting vulnerability (CNVD-2019-26357)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Feature Manager interface in versions prior to cPanel 11.54.0.4...

The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway interface of the PAN-OS operating system allows a perpetrator to execute arbitrary code by sending a specially crafted request to the vulnerable device.

The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway interface of the PAN-OS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code by sending a specially crafted request to...

The vulnerability of the BGP protocol implementation in the JunOS operating system allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in the JunOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by performing a certain sequence of BGP session restarts...

The vulnerability of the Fast Transition function in the implementation of the 802.11r protocol of Cisco IOS Access Points allows a attacker to cause service interruptions.

The vulnerability of the Fast Transition function in the 802.11r portlet implementation of Cisco IOS Access Points is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted replay events...

CVE-2019-1010234

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is:...

CVE-2019-1010245

The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The...

PT-2019-2796

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1.18 and earlier PAN-OS versions 8.0.11-h1 and earlier PAN-OS versions 8.1.2 and earlier Description The issue exists due to insufficient input validation in the GlobalProtect portal and GlobalProtect Gateway interface of the...

CVE-2019-1941

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the...

CVE-2019-3571

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension...

Delta Industrial Automation CNCSoft Denial of Service Vulnerability

Delta Electronics Delta Industrial Automation CNCSoft is a set of CNC machine simulation system software from Delta Electronics, Taiwan, China. A denial of service vulnerability exists in Delta Electronics Delta Industrial Automation CNCSoft ScreenEditor versions prior to 1.00.84, which stems fro...

PT-2019-6418

Name of the Vulnerable Software and Affected Versions resteasy versions 3.x.x prior to 3.12.0.Final resteasy versions 4.x.x prior to 4.6.0.Final Description A flaw was found in resteasy where an improper input validation results in returning an illegal header that integrates into the server's...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco IOS XR operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2019-4352

Name of the Vulnerable Software and Affected Versions GNU Libc affected versions not specified Description The issue is related to the libld component of the GNU Libc library, which provides system calls and basic functions. It is associated with insufficient input validation, allowing a remote...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2019-23979)

MiniCMS is a content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the mc-admin/post-edit.php file in MiniCMS version 1.10. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can...

CVE-2019-1893

A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file...

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read/Write Vulnerability

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. An arbitrary file read/write vulnerability exists in Cisco Enterprise NFV...

The vulnerability of the GZIP decompression mechanism in the AsyncOS operating system of Cisco Email Security Appliance allows attackers to bypass the configured content filters on the device.

The vulnerability of the GZIP decompression mechanism in the AsyncOS operating system used by Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters on the device by sendin...

The vulnerability of the command-line interface of the Cisco NX-OS network operating system allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of the Cisco NX-OS network operating system’s command-line interface CLI is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges on the base operating system...

The vulnerability of the Cisco Discovery Protocol implementation in microprogramming software for Cisco TelePresence Codec (TC) and Cisco Collaboration Endpoint (CE) devices arises due to insufficient validation of input data. This allows attackers to execute arbitrary commands or carry out arbitrary scripts.

The vulnerability of the Cisco Discovery Protocol implementation in microprogramming software for Cisco TelePresence Codec TC and Cisco Collaboration Endpoint CE software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitra...

The vulnerability of the command-line interface of Cisco NX-OS and FX-OS allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the command-line interface CLI of Cisco NX-OS and FX-OS network operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges on the Linux base operating system...