Design/Logic Flaw

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1727: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

PT-2019-2367

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient sanitization of user-supplied parameters passed to certain Python functions in the scripting sandbox, allowing an authenticated, local attack...

Microsoft Windows Multiple Vulnerabilities (KB4499164)

This host is missing a critical security update according to Microsoft KB4499164. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PT-2019-2269

Name of the Vulnerable Software and Affected Versions Microsoft Azure Active Directory Connect version 1.3.20.0 Description The issue is related to insufficient access restrictions in Microsoft Azure Active Directory Connect, allowing a remote attacker to elevate their privileges. To exploit this...

PT-2019-2224

Name of the Vulnerable Software and Affected Versions Windows Storage Service affected versions not specified Description The issue is related to errors in privilege management within the Storage Service component of the Windows operating system. It allows a remote attacker to potentially elevate...

PT-2019-2249

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from Microsoft SharePoint Server's failure to properly sanitize specially crafted web requests, allowing an attacker to perform cross-site scripting attac...

PT-2019-2204 · Intel · Intel Active Management Technology

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 11.8.65 Intel Active Management Technology versions prior to 11.11.65 Intel Active Management Technology versions prior to 11.22.65 Intel Active Management Technology versions prior to...

KLA11483 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...

PT-2019-2114

Name of the Vulnerable Software and Affected Versions Samba versions 4.8.x up to, excluding 4.8.12 Samba versions 4.9.x up to, excluding 4.9.8 Samba versions 4.10.x up to, excluding 4.10.3 Description A flaw was found in Samba's Heimdal KDC implementation when used in AD DC mode, allowing a...

CVE-2018-7120: Undefined Security Weakness

A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege...

PT-2019-11085

Name of the Vulnerable Software and Affected Versions: HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy version 5.00.50 Description: A security issue in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy could allow local or remote unauthorized elevation of...

Siemens SIMATIC CP 1543-1 < 2.0.28 Privilege Elevation

Binary data 720091.prm...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SD...

CVE-2019-1816

A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance WSA could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The vulnerability is due to insufficient validation of user-supplied input on the web and command-lin...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Directory Server

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Security Directory Server SDS. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded, JRockit JSSE...

Improper Access Control

Java SE and Java SE Embedded are vulnerable to improper access control attacks. The affected component is JCE of OpenJDK. A local attacker could possibly use this flaw to load an attacker-controlled library which elevates their privileges...

Cross-site Scripting (XSS)

Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers. A number of unprotected resources web pages, export functionality,...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, 8 used by IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable CVEs. These issues were also addressed by IBM WebSphere Application Server shipped with IBM...