4240 matches found
Multiple Cloud Foundry Products CVE-2019-11289 Denial of Service Vulnerability
Description Multiple Cloud Foundry Products are prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Technologies Affected Cloud Foundry Routing OSS 0.118.0 Cloud Foundry Routing OSS 0.121.0 Cloud...
Moodle CVE-2019-14882 Open Redirection Vulnerability
Description Moodle is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to a...
Moodle CVE-2019-14881 Cross Site Scripting Vulnerability
Description Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attack...
Moodle CVE-2019-14883 Remote Security Vulnerability
Description Moodle is prone to a remote security vulnerability. An attacker can leverage this issue to perform unauthorized actions. This may aid in further attacks. Moodle 3.7 through 3.7.2 and 3.6 through 3.6.6 versions are vulnerable. Technologies Affected Moodle Moodle 3.6 Moodle Moodle 3.6.1...
Apache Atlas CVE-2019-10070 HTML Injection Vulnerability
Description Apache Atlas is prone to an HTML injection vulnerability because it fails to sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based...
Multiple ABB Products CVE-2019-18250 Authentication Bypass Vulnerability
Description Multiple ABB products are prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected ABB Plant Connect ABB Power Generati...
WordPress Email Subscribers & Newsletters Plugin Cross Site Request Forgery Vulnerability
Description The Email Subscribers Newsletters Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. Versions prior to Ema...
Trusted Platform Module CVE-2019-16863 Unspecified Security Vulnerability
Description Trusted Platform Module is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Technologies Affected STMicroelectronics Trusted Platform Module Trusted...
Microsoft Windows OpenType Fonts CVE-2019-1456 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...
Microsoft Edge Chakra Scripting Engine CVE-2019-1426 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Microsoft Windows DirectWrite CVE-2019-1432 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1...
Microsoft Edge Chakra Scripting Engine CVE-2019-1427 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Intel Ethernet 700 Series Controllers CVE-2019-0140 Buffer Overflow Vulnerability
Description Intel Ethernet 700 Series Controllers are prone to a buffer-overflow vulnerability. An attacker can exploit this issue to obtain elevated privileges that may aid in further attacks. Intel Ethernet 700 Series Controllers versions prior to 7.0 are vulnerable. Technologies Affected Citri...
Microsoft Windows Hyper-V CVE-2019-0712 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
Microsoft Exchange Server CVE-2019-1373 Remote Code Execution Vulnerability
Description Microsoft Exchange Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Windows 'DirectWrite' API CVE-2019-1411 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Fortinet FortiOS CVE-2019-15705 Denial of Service Vulnerability
Description Fortinet FortiOS is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. Technologies Affected Fortinet FortiOS 4.3.10 Fortinet FortiOS 4.3.12 Fortinet FortiOS 4.3.13 Fortinet FortiOS 4.3.14 Fortinet FortiOS 4.3.8 Fortinet...
Philips Tasy EMR CVE-2019-13557 Information Disclosure Vulnerability
Description Philips Tasy EMR is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain unauthorized access to sensitive information. This may lead to further attacks. Philips Tasy EMR version 3.02.1744 and prior are affected. Philips Tasy WebPortal version...
Fuji Electric V-Server
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: V-Server Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the device being accessed; several heap-based buffer overflows...
Cisco Web Security Appliance CVE-2019-15969 Cross Site Scripting Vulnerability
Description Cisco Web Security Appliance is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...