Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability (cisco-sa-20191016-tele-ce-cmdinj)

According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE Cisco TelePresence Software is affected by a command injection vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this by authenticating as an...

PT-2019-3975

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA500 Series IP Phones affected versions not specified Description A vulnerability in the Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the devic...

PT-2019-3964

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE affected versions not specified Cisco TelePresence Codec TC affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the CLI of Cisco...

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause downtime or service failures through the use of MySQL network protocols...

PT-2019-3895

Name of the Vulnerable Software and Affected Versions RouterOS versions 6.45.6 and below RouterOS version 6.44.5 Long-term and below Description The issue allows a remote attacker to poison the router's DNS cache via malicious responses with additional and untrue records. This is due to the route...

PT-2019-5019

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 70 Description The issue is related to a security policy vulnerability in the Firefox web browser, which is connected to an insufficient input validation mechanism. This could allow a remote attacker to impact data...

CVE-2019-15281 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The attacker must have...

PT-2019-3732

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Description The issue is related to insufficient input validation in the Java VM component of Oracle Database Server. This can be exploited by a remote attacker to gain rea...

PT-2019-5270

Name of the Vulnerable Software and Affected Versions Syndesis affected versions not specified Description The issue is related to the configuration of Syndesis, specifically with Cross-Origin Resource Sharing CORS set to allow all origins, which could be exploited by an attacker to conduct...

PT-2019-3664

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.4 and 13 Description The issue exists due to insufficient input validation in the 2D component of Oracle Java SE, allowing a remote attacker to cause a partial denial of service. This vulnerability can be exploited by an...

PT-2019-3519

Name of the Vulnerable Software and Affected Versions Sudo versions prior to 1.8.28 Description The issue allows an attacker with access to a Runas ALL sudoer account to bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user...

PT-2019-4068

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A1 version 1.06 Description An issue allows an attacker to access management pages of the router by ignoring a specific line in an .asp file, providing access to sensitive pages such as d status.asp, version.asp, d dhcptbl.asp,...

Cisco IOS XE Software Stored XSS (cisco-sa-20190925-xss)

According to its self-reported version, Cisco IOS XE Software is affected by a stored cross-site scripting XSS vulnerability in its web framework code. This allows an unauthenticated, remote attacker to conduct stored XSS attacks against a user of the web interface of the affected software. The...

PT-2019-3478

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D61 Juniper Networks Junos OS versions prior to 15.1X49-D130 Juniper Networks Junos OS versions prior to 17.3R3 Juniper Networks Junos OS versions prior to 17.4R2 Description A vulnerability ...

PT-2019-3531

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue is related to insufficient input validation in the Windows Remote Desktop Client, allowing a remote attacker to execute arbitrary code when a user connects to ...

PT-2019-3528 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient input validation in the web-based management interface of the software. This could allow a remote attacker to...

PT-2019-3388 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient input validation in the web UI of the Cisco Firepower Management Center, which could allow a remote attacker to execute...

CVE-2019-12688: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

CVE-2019-12687: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some...