CVE-2019-0128: Undefined Security Weakness

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

PT-2019-12952

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.5.1 Description The issue is related to the mishandling of context changes by the rcc context function in libr/egg/egg lang.c. This can be exploited by remote attackers to cause a denial of service, resulting in an...

CVE-2019-11123: Improper Input Validation

Insufficient session validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11126: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pointer corruption in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

PT-2019-8870

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.21.55 IntelR Server Platform Services versions prior to 4.0 IntelR Trusted Execution Engine Firmware versions prior to 3.1.55 Description The issue is related to insufficient input validation in the HECI...

CVE-2019-0136: Undefined Security Weakness

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2019-11125: Improper Input Validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11129: Out-of-bounds Read

Out of bound read/write in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11128: Improper Input Validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0311

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0311

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

Cross site scripting

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0311

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0311

Summary: CVE-2019-0311 affects SAP R/3 Enterprise Application’s Automotive Dealer Portal (versions 600–617). It arises from insufficient encoding of user-controlled inputs, enabling Cross-Site Scripting (XSS) where an attacker’s input can execute scripts in a victim’s browser. Affected component:...

CVE-2019-0311: Improper Neutralization of Input During Web Page Generation

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

PT-2019-11227

Name of the Vulnerable Software and Affected Versions: SAP R/3 Enterprise Application Automotive Dealer Portal versions 600 through 617 Description: The issue arises from insufficient encoding of user-controlled inputs, allowing an attacker to send unwanted scripts to the victim's browser and...

PT-2019-2392

Name of the Vulnerable Software and Affected Versions IntelR NUC Kit affected versions not specified Description The issue is related to a buffer overflow in the system firmware, which may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information...

PT-2019-12944

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.5.1 Description The issue is related to a heap-based buffer over-read in the r egg lang parsechar function, which can be exploited by remote attackers to cause a denial of service, potentially leading to an...

CVE-2019-12506: Missing Authentication for Critical Function

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target...

Logitech R700 Laser Presentation Remote R-R0010 Injection Vulnerability

The Logitech R700 Laser Presentation Remote R-R0010 is a wireless presentation remote control from Logitech Switzerland. An injection vulnerability exists in Logitech R700 Laser Presentation Remote R-R0010. The vulnerability arises when, during user input to construct commands, data structures, o...