Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...

PT-2019-1573

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions 6.0.0 through 7.0.6 Apache Qpid Broker-J version 7.1.0 Description A Denial of Service issue was found in Apache Qpid Broker-J, allowing an unauthenticated attacker to crash the broker instance by sending speciall...

PT-2019-2112

Name of the Vulnerable Software and Affected Versions IntelR i915 Graphics for Linux versions prior to 5.0 Description The issue is related to insufficient input validation in the Kernel Mode Driver of IntelR i915 Graphics for Linux. This may allow an authenticated user to potentially enable...

PT-2019-4678

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK affected versions not specified WinSCP versions prior to 5.14 beta Description The issue is related to insufficient input validation. In the case of WinSCP, this affects the TSCPFileSystem::SCPSink in...

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

PT-2019-1286

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected...

Command injection

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

The vulnerability of the External Protocol Handler component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the External Protocol Handler component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created HTML page from a remote location...

PT-2018-2753

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue ma...

PT-2018-3441

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the implementation of the ndspath command in the Supportutils package for SUSE Linux. This can allow an attacker to gain unauthoriz...

PT-2018-3445

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can...

Scientific Linux Security Update : samba on SL7.x x86_64 (20181030)

Security Fixes : - samba: Weak authentication protocol regression CVE-2018-1139 - samba: Insufficient input validation in libsmbclient CVE-2018-10858 - samba: NULL pointer dereference in printer server process CVE-2018-1050 C Tenable Network Security, Inc. The descriptive text is C Scientific...

PT-2018-2696

Name of the Vulnerable Software and Affected Versions Intel Rapid Store Technology RST versions prior to 16.7 Description The issue is related to insufficient input validation in the installer, which may allow an unprivileged user to potentially elevate privileges or cause an installer denial of...

CVE-2018-3621: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

RHEL 7 : samba (RHSA-2018:3056)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3056 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

PT-2018-10862

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile versions SD 845, SD 850, SDA660 Description A buffer overflow issue exists due to insufficient validation of input length in the WLAN function. Recommendations For versions SD 845, SD 850, SDA660, update to a newer...

PT-2018-10858

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile versions SD 835 through SD 850 Description The issue arises from insufficient input validation of the IE length when processing IE set commands, potentially leading to buffer overwrite. Recommendations For versions SD 835...

The vulnerability in the web interface of the operating system PAN-OS allows a hacker to terminate all control sessions.

The vulnerability in the web interface of the operating system PAN-OS arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to terminate all control sessions and redirect authenticated users to the login page...