2067 matches found
DEBIAN-CVE-2019-19956
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-oldNs...
Unspecified Vulnerability in Forcepoint NGFW Security Management Center
Forcepoint NGFW Security Management Center SMC is a Forcepoint product that provides unified, centralized management capabilities for Forcepoint's next-generation firewalls. A security vulnerability exists in Forcepoint NGFW SMC versions prior to 6.5.12 and prior to 6.7.1. An attacker could explo...
cPanel Access Control Error Vulnerability (CNVD-2020-03743)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 70.0.23. An attacker can exploit this vulnerability to bypass .htacce...
chromium-browser: Insufficient policy enforcement in navigation
Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
Apple iPhone 3GS Non-Null Pointer Vulnerability
The Apple iPhone 3GS is a smartphone from the American company Apple. A security vulnerability exists in the Apple iPhone 3GS old bootrom and new bootrom. An attacker can exploit the vulnerability to install arbitrary firmware...
The vulnerability of the multires_load_old_dm component in the software suite for creating 3D computer graphics in Blender allows a hacker to execute arbitrary code.
The vulnerability of the multiresloadolddm component in the software suite used for creating 3D computer graphics in Blender is due to a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created blend file...
TYPO3 cross-site scripting vulnerability (CNVD-2019-41223)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. The vulnerability stems from a lack of proper validation of...
CVE-2019-6121
An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance at the time of December 2017 breach , Projected payout, Mining stats like profitability...
CVE-2019-3977
RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can trick the router into "upgrading" to an older version of RouterOS and possibly reseting all the system...
SavedListOfDDCsSids.xml furnishing SIDs of old controllers for VDA registration
Old controller names in the Events for Broker Agent Service while making registration calls...
python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...
libssh2 input validation error vulnerability (CNVD-2019-37882)
libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, and providing a secure transmission channel for remote programs. An input validation error vulnerability exists in the SSHMSGDISCONNECT logic of the packet.c file i...
Unspecified Vulnerability in Tracker Software PDF-XChange Editor
Tracker Software PDF-XChange Editor is a Canadian Tracker Software company's set of software for viewing, editing PDF format files. A security vulnerability exists in Tracker Software PDF-XChange Editor versions prior to 8.0.330.0, which can be exploited by an attacker to steal NTLM hashes and th...
PT-2019-5865 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/gem-private.h, related to division by zero. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...
CVE-2019-15749
SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password. This would allow an attacker with access to the victim's account e.g., via XSS or an unattended workstation to change that password and...
openSUSE Security Update : links (openSUSE-2019-2185)
This update for links fixes the following issues : links was updated to 2.20.1 : - libevent bug fixes links was updated to 2.20 : - Security bug fixed: when links was connected to tor, it would send real dns requests outside the tor network when the displayed page contains link elements with...
CVE-2019-10988
Affected product: Philips HDI 4000 Ultrasound Systems (all versions on old, unsupported OS such as Windows 2000). Root cause: Use of obsolete function CWE-477 in the system’s software, enabling exploitation. Impact: CVSS v3 base score 3.0; potential exposure of ultrasound images and integrity com...
krb5: Reachable assertion in the KDC using S4U2Self requests
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type single-DES, triple-DES, or RC4, the attacker can crash the KDC by making an S4U2Self request...
NebulousAD - Automated Credential Auditing Tool
NebulousAD Automated Credential Auditing Tool. Installation Simply download the precompiled release requires no python interpreter, or build from source: Requires Python2.7 for now Run git clone [email protected]:NuID/nebulousAD.git Next, install with python setup.py install Then initialize...