The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

PT-2019-1286

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected...

PT-2019-4790

Name of the Vulnerable Software and Affected Versions SIMATIC S7-1500 CPU versions V2.0 through V2.5 SIMATIC S7-1500 CPU versions V1.8.5 and earlier Description A vulnerability has been identified that could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the...

Command injection

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

PT-2018-2753

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue ma...

The vulnerability of the External Protocol Handler component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the External Protocol Handler component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created HTML page from a remote location...

CVE-2018-9072

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...

PT-2018-3441

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the implementation of the ndspath command in the Supportutils package for SUSE Linux. This can allow an attacker to gain unauthoriz...

PT-2018-3445

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can...

Scientific Linux Security Update : samba on SL7.x x86_64 (20181030)

Security Fixes : - samba: Weak authentication protocol regression CVE-2018-1139 - samba: Insufficient input validation in libsmbclient CVE-2018-10858 - samba: NULL pointer dereference in printer server process CVE-2018-1050 C Tenable Network Security, Inc. The descriptive text is C Scientific...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

PT-2018-2696

Name of the Vulnerable Software and Affected Versions Intel Rapid Store Technology RST versions prior to 16.7 Description The issue is related to insufficient input validation in the installer, which may allow an unprivileged user to potentially elevate privileges or cause an installer denial of...

CVE-2018-3621: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

Heap overflow

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

DEBIAN-CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

RHEL 7 : samba (RHSA-2018:3056)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3056 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

PT-2018-10862

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile versions SD 845, SD 850, SDA660 Description A buffer overflow issue exists due to insufficient validation of input length in the WLAN function. Recommendations For versions SD 845, SD 850, SDA660, update to a newer...

PT-2018-10858

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile versions SD 835 through SD 850 Description The issue arises from insufficient input validation of the IE length when processing IE set commands, potentially leading to buffer overwrite. Recommendations For versions SD 835...