CVE-2019-5397

CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...

CVE-2019-5396

CVE-2019-5396 affects HPE 3PAR Service Processor; prior to version 5.0.5.1, there is a remote authentication bypass vulnerability in the SP management interface. The issue allows an attacker with network access and no privileges to bypass authentication, potentially compromising confidentiality (...

CVE-2019-5396

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5395

HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...

CVE-2019-5395

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Rockwell Automation/Allen-Bradley 1769-L18ERM LOGIX5318ERM CompactLogix 5370 L1 Processor

Binary data 764811.prm...

The vulnerability of the Intel Processor Diagnostic Tool, related to deficiencies in access control, allows a malicious actor to escalate their privileges, disclose protected information, or cause service failures.

The vulnerability of the Intel Processor Diagnostic Tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges, expose sensitive information, or cause service failures...

The vulnerability of the PAN-OS operating system, related to the lack of measures for cleaning incoming data, allows a perpetrator to gain access to the operating system’s command processor and enhance their privileges.

The vulnerability of the PAN-OS operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the operating system’s command processor and enhance their privileges...

UBUNTU-CVE-2019-10163

A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured a...

CVE-2019-2238

Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...

CVE-2019-2316

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730...

Fedora Update for libreoffice FEDORA-2019-5561d20558

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: libreoffice-6.2.5.2-1.fc30

LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

DEBIAN-CVE-2019-13590

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

CVE-2019-11133

Improper access control in the IntelR Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

Improper access control

Improper access control in the IntelR Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

CVE-2019-11133

Improper access control in the IntelR Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

CVE-2019-11133

CVE-2019-11133 concerns the Intel Processor Diagnostic Tool prior to version 4.1.3.35, where improper access control may allow an authenticated user to escalate privileges, disclose information, or cause denial of service via local access. The Red Hat intel advisory and Intel security advisory co...

CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

Design/Logic Flaw

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...