CVE-2019-15979

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system OS. For more information about...

PT-2019-17127

Name of the Vulnerable Software and Affected Versions IBM QRadar Advisor versions 1.0.0 through 2.4.0 Description The issue allows attackers to bypass application controls due to incomplete blacklisting for input validation, resulting in a direct impact to the system and data integrity...

CVE-2019-10915

A vulnerability has been identified in TIA Administrator All versions V1.0 SP1 Upd1. The integrated configuration web application TIA Administrator allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access t...

XML Entity Expansion in Pippo

XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...

GHSA-HWCX-9P4J-7HWJ XML Entity Expansion in Pippo

XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...

ALPINE-CVE-2019-8320

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files which now include path-checking code for symlinks, it would delete the target destination. If that destination was hidden behind a symlink, a malicious gem could...

PT-2019-11248

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

F5 Networks BIG-IP : BIND vulnerability (K00040234)

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1, and versions 9.10.7-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 of th...

PT-2019-19287

Name of the Vulnerable Software and Affected Versions MDaemon Webmail versions 14.x through 18.x before 18.5.2 Description A cross-site scripting XSS issue allows attackers to affect the system. This is a type of security vulnerability that can enable an attacker to inject malicious scripts into ...

PT-2019-11240

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

Security Bulletin: A vulnerability in the SQLite component of the Response Time agent affects IBM Performance Management products

Summary SQLite is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by getNodeSize function in ext/rtree/rtree.c. By using a specially-crafted database, a remote attacker could overflow a buffer and cause unspecified impacts on the system. Vulnerability Details CVEID:...

Input validation

A vulnerability in the Secure Copy Protocol SCP server of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation of...

PT-2018-9183

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9176

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9171

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9179

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9181

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9136

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9077

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2018-9131

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...