400 matches found
Cisco IC3000 Industrial Compute Gateway CVE-2019-12714 Denial of Service Vulnerability
Description Cisco IC3000 Industrial Compute Gateway is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. This issue is being tracked by Cisco Bug IDs CSCvq92705. Technologies Affected Cisco...
Palo Alto Networks Zingbox Inspector CVE-2019-15015 Hardcoded Credentials Vulnerability
Description Palo Alto Networks Zingbox Inspector is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable system and perform unauthorized actions. Palo Alto Networks Zingbox Inspector version 1.294 and prior are vulnerabl...
Palo Alto Networks Zingbox Inspector CVE-2019-15023 Information Disclosure Vulnerability
Description Palo Alto Networks Zingbox Inspector is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Versions prior to Zingbox Inspector 1.295 are vulnerable. Technologies Affected Paloaltonetworks...
Multiple Jenkins Plugins Multiple Security Vulnerabilities
Description Jenkins plugins are prone to the following vulnerabilities: 1. A HTML-injection vulnerability 2. Multiple information-disclosure vulnerabilities 3. A security-bypass vulnerability An attacker may leverage these issues to steal cookie-based authentication credentials, gain access to...
Redhat Undertow CVE-2019-10212 Information Disclosure Vulnerability
Description Redhat Undertow is prone to an information-disclosure vulnerability. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Undertow versions 2.0.20 and prior are vulnerable. Technologies Affected Redhat JBoss Data Gri...
PuTTY CVE-2019-17069 Denial of Service Vulnerability
Description PuTTY is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Versions prior to PuTTY 0.73 are vulnerable. Technologies Affected Simon Tatham PuTTY 0.45 Simon Tatham PuTTY 0.46 Simon Tatham PuTTY 0.47 Simon Tatham PuTTY...
Ghidra CVE-2019-16941 Arbitrary Code Execution Vulnerability
Description Ghidra is prone to an arbitrary code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Ghidra versions through 9.0.4 are vulnerable. Technologies Affected NSA Ghidra 9.0 NSA Ghidra 9.0.1 NSA Ghidra 9.0...
Golang Go CVE-2019-16276 HTTP Request Smuggling Vulnerability
Description Golang Go is prone to an HTTP-request-smuggling vulnerability. A remote attacker may leverage this issue to poison web caches,bypass security defenses, launch cross-site scripting and HTML-injection attacks, and execute session-hijacking attacks. Other attacks are also possible...
Linux Kernel CVE-2019-18680 Denial of Service Vulnerability
Description Linux Kernel is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Linux kernel versions 4.4.x prior to 4.4.195 are vulnerable. Technologies Affected Linux kernel 4.4.0-57 Linux kernel 4.4.1 Linux kernel 4.4.105 Linux...
Microsoft SharePoint CVE-2019-1259 Spoofing Vulnerability
Description Microsoft SharePoint is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft SharePoint...
Microsoft Windows DirectWrite CVE-2019-1244 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 fo...
Microsoft Edge Scripting Engine CVE-2019-1299 Information Disclosure Vulnerability
Description Microsoft Edge is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Recommendations Run all software as a nonprivileged user with minimal acce...
Microsoft Windows Remote Desktop Client CVE-2019-0788 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 Version 1607 f...
Microsoft ASP.NET Core CVE-2019-1302 Remote Privilege Escalation Vulnerability
Description Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ASP.NET Core 2.1 Microsoft ASP.NET Core 2.2 Microsoft ASP.NET Core 3.0 Recommendations Block external access ...
Microsoft Yammer CVE-2019-1265 Security Bypass Vulnerability
Description Microsoft Yammer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Yammer for Android Recommendations Run all software as a nonprivileged user with...
Microsoft SharePoint CVE-2019-1295 Remote Code Execution Vulnerability
Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsof...
Microsoft Exchange Server CVE-2019-1266 Spoofing Vulnerability
Description Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Exchan...
ISC Kea CVE-2019-6472 Denial of Service Vulnerability
Description ISC Kea is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Kea 1.4.0 through 1.5.0, 1.6.0-beta1, and 1.6.0-beta2 are vulnerable. Technologies Affected ISC Kea 1.4.0 ISC Kea 1.5.0 ISC Kea 1.6.0-beta1 ISC Kea...
ISC Kea CVE-2019-6473 Denial of Service Vulnerability
Description ISC Kea is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Kea 1.4.0 through 1.5.0, 1.6.0-beta1, and 1.6.0-beta2 are vulnerable. Technologies Affected ISC Kea 1.4.0 ISC Kea 1.5.0 ISC Kea 1.6.0-beta1 ISC Kea...
Microsoft Windows Hyper-V CVE-2019-0717 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1809 for x64-based Systems Microsoft Windows ...