PT-2019-2112

Name of the Vulnerable Software and Affected Versions IntelR i915 Graphics for Linux versions prior to 5.0 Description The issue is related to insufficient input validation in the Kernel Mode Driver of IntelR i915 Graphics for Linux. This may allow an authenticated user to potentially enable...

PT-2019-4678

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK affected versions not specified WinSCP versions prior to 5.14 beta Description The issue is related to insufficient input validation. In the case of WinSCP, this affects the TSCPFileSystem::SCPSink in...

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

PT-2019-1286

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected...

Command injection

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

PT-2018-2753

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue ma...

The vulnerability of the External Protocol Handler component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the External Protocol Handler component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created HTML page from a remote location...

PT-2018-3441

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the implementation of the ndspath command in the Supportutils package for SUSE Linux. This can allow an attacker to gain unauthoriz...

PT-2018-3445

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can...

Scientific Linux Security Update : samba on SL7.x x86_64 (20181030)

Security Fixes : - samba: Weak authentication protocol regression CVE-2018-1139 - samba: Insufficient input validation in libsmbclient CVE-2018-10858 - samba: NULL pointer dereference in printer server process CVE-2018-1050 C Tenable Network Security, Inc. The descriptive text is C Scientific...

PT-2018-2696

Name of the Vulnerable Software and Affected Versions Intel Rapid Store Technology RST versions prior to 16.7 Description The issue is related to insufficient input validation in the installer, which may allow an unprivileged user to potentially elevate privileges or cause an installer denial of...

CVE-2018-3621: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

RHEL 7 : samba (RHSA-2018:3056)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3056 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

PT-2018-10858

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile versions SD 835 through SD 850 Description The issue arises from insufficient input validation of the IE length when processing IE set commands, potentially leading to buffer overwrite. Recommendations For versions SD 835...

PT-2018-10862

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile versions SD 845, SD 850, SDA660 Description A buffer overflow issue exists due to insufficient validation of input length in the WLAN function. Recommendations For versions SD 845, SD 850, SDA660, update to a newer...

The vulnerability in the web interface of the operating system PAN-OS allows a hacker to terminate all control sessions.

The vulnerability in the web interface of the operating system PAN-OS arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to terminate all control sessions and redirect authenticated users to the login page...

PT-2018-3101

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue arises from insufficient input validation in a .dll component of the Advantech WebAccess software, allowing a remote attacker to delete arbitrary files. This can occur when t...

PT-2018-3220

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to incorrect dialog placement in the Extensions section of Google Chrome, allowing a remote attacker to spoof the contents of extension popups via a crafted HTML pag...

PT-2018-3219

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to incorrect dialog placement in the Cast UI, which can be exploited by a remote attacker to obscure the full screen warning. This can be achieved via a crafted HTML...