Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into argument...

PT-2019-2056

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller affected versions not specified Description The issue is related to insufficient access control in the FUSE filesystem functionality, which could allow an authenticated, local attacker to...

The vulnerability of the Software Image Management component of the system identification management service in Cisco Digital Network Architecture Center allows a attacker to gain access to internal services.

The vulnerability of the Software Image Management component of the Cisco Digital Network Architecture Center DNA Center’s identity management service is related to insufficient verification of data entered by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, t...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...

PT-2019-5743

Name of the Vulnerable Software and Affected Versions libseccomp-golang versions 0.9.0 and earlier Description The issue is related to the incorrect generation of BPFs by libseccomp-golang, where multiple arguments are ORed instead of ANDed. This allows a process to bypass intended access...

PT-2019-2127

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions affected versions not specified Description The issue is related to insufficient input validation in the email message scanning function. This could allow a remote attacker to bypass configured conte...

PT-2019-2128

Name of the Vulnerable Software and Affected Versions Cisco UCS B-Series Blade Servers versions prior to 4.02a Description The issue is related to insufficient input validation in the local management CLI implementation, allowing an authenticated, local attacker to overwrite arbitrary files on di...

PT-2019-2751

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.28 Oracle VM VirtualBox versions prior to 6.0.6 Description The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2082

Name of the Vulnerable Software and Affected Versions Juniper Identity Management Service JIMS for Windows versions prior to 1.1.4 Description The issue allows an attacker with physical access to an existing domain-connected Windows system to bypass SRX firewall policies or trigger a Denial of...

The vulnerability of the PHPMailer library, related to incorrect input data validation, allows attackers to inject objects into the system.

The vulnerability of the PHPMailer library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to inject objects into the system...

EulerOS 2.0 SP2 : samba (EulerOS-SA-2019-1125)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - samba: Insufficient input validation in libsmbclient CVE-2018-10858 - samba: NULL pointer dereference in printer server process CVE-2018-1050 Not...

The vulnerability of the Intel Graphics Kernel Mode Driver lies in its insufficient input validation, which allows attackers to execute arbitrary code.

The vulnerability of the Intel Graphics Kernel Mode Driver is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2019-1745: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability b...

EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1107)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 - systemd: stack overflow when calling syslog from ...

CVE-2019-1765: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level...

The vulnerability of the TIFFWriteDirectorySec() function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFWriteDirectorySec function tifdirwrite.c in the LibTIFF library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted file...

PT-2019-1720

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

CVE-2018-12215

Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables a privileged user to cause a...

CVE-2018-12198

Insufficient input validation in IntelR Server Platform Services HECI subsystem before version SPSE504.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access...

Integer overflow

Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables an unprivileged user to cause ...