CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

PT-2020-15058

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 Description The system has a logic error under certain scenarios, which could allow an attacker with guest user privileges to access the host user's desktop without unlockin...

CVE-2020-1787: Improper Authentication

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities

Binary data openbsdauthbypass.nbin...

CVE-2019-8293

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution...

CVE-2019-8293

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution...

Code injection

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution...

CVE-2019-8293

The CVE-2019-8293 issue affects upload-image-with-ajax v1.0 and arises from a logic error in the code, allowing arbitrary files to be uploaded to the web root and enabling code execution. The available connected sources confirm the vulnerability’s presence and the impact (remote code execution vi...

CVE-2019-8293

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution...

Design/Logic Flaw

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that targets a FastL4 virtual server VIP on VIP, hardware appliances may stop responding...

PT-2019-18970

Name of the Vulnerable Software and Affected Versions upload-image-with-ajax version 1.0 Description A logic error in the code allows arbitrary files to be uploaded to the web root, enabling code execution. Recommendations For upload-image-with-ajax version 1.0, consider disabling the file upload...

Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass (cisco-sa-20180926-macsec)

According to its self-reported version, Cisco IOS XE Software is affected by an authentication bypass vulnerability in the MACsec Key Agreement MKA using Extensible Authentication Protocol-Transport Layer Security EAP-TLS functionality due to a logic error. An unauthenticated, adjacent attacker c...

Intel PROSet/Wireless WiFi Software Logic Error Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A logic error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which can be exploited by a local attacker to elevate privileges, cause a denial of service, and disclose...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

OpenBSD 6.6 vulnerability CVE-2019-19519: a logic error in su.c enables a local user to use su -L to login with another user’s login class, enabling local privilege escalation. Affected software is OpenBSD 6.6; the flaw resides in the main function of su/su.c. Consequences include bypassing inten...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519: Improper Authentication

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

PT-2019-15864

Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description A logic error in the main function in su/su.c allows local users to achieve any login class, often excluding root, by using the su -L option. Recommendations For OpenBSD version 6.6, at the moment, there is no...

Cisco IOS XE Software with Cisco Umbrella Integration DoS (cisco-sa-20180328-opendns-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Cisco Umbrella Integration feature due to a logic error that exists when handling a malformed incoming packet, leading to access to an internal data structure after it has bee...