The vulnerability of the command-line interface of the Cisco NX-OS network operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the Cisco NX-OS network operating system’s command-line interface CLI is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges on the base operating system...

SUSE-SU-2019:1674-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-956 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network...

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers allows a perpetrator to trigger a service failure.

The vulnerability of Skype for Business Server Microsoft Lync Server in corporate communication servers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Path Traversal

Overview All versions of static-resource-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...

PT-2019-2485 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation on the host server of the Hyper-V hardware virtualization system in Windows. This can be exploited by a remote attacker using a...

Path Traversal in servey

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version...

PT-2024-6534 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.29 PHP versions 8.2. through 8.2.23 PHP versions 8.3. through 8.3.11 Description: The issue is related to erroneous parsing of multipart form data contained in an HTTP POST request, which could lead to legitimate...

Vulnerability in the built-in software of the Intel NUC Kit, related to insufficient verification of input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability in the built-in software of the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

CVE-2019-11085

Insufficient input validation in Kernel Mode Driver in IntelR i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11094

Insufficient input validation in system firmware for Intel R NUC Kit may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...

CVE-2019-11114

Insufficient input validation in IntelR Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-0094

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

CVE-2019-0097

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

CVE-2019-0092

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-11085

CVE-2019-11085 affects the Kernel Mode Driver for Intel(R) i915 Graphics in Linux, with insufficient input validation in the driver prior to version 5.0. The vulnerability could allow an authenticated local user to escalate privileges (local, with low attack complexity). The impact is rated high ...

Siemens’ software vulnerabilities, related to insufficient validation of input data, allow attackers to trigger service failures.

The vulnerability of Siemens’ software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted network packets to port 4840/TCP...

CVE-2018-19826

DISPUTED In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop containing a Sass::Inspect::operatorSass::StringQuoted stack frame may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue i...

Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into argument...

The vulnerability of the Software Image Management component of the system identification management service in Cisco Digital Network Architecture Center allows a attacker to gain access to internal services.

The vulnerability of the Software Image Management component of the Cisco Digital Network Architecture Center DNA Center’s identity management service is related to insufficient verification of data entered by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, t...