7570 matches found
CVE-2019-2744
CVE-2019-2744 affects the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affects versions 12.0.1–12.0.3, 12.1.0–12.4.0 and 14.0.0–14.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to com...
CVE-2019-2744
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...
DEBIAN-CVE-2019-13631
In parsehidreportdescriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages...
The vulnerability in the implementation of the udc_pci_probe handler in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the udcpciprobe handler in the Linux kernel’s drivers/usb/gadget/udc/amd5536udc.ko module is related to the repeated memory release mechanism. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting an AMD5536 UDC device, which appears as a...
The vulnerability of the if_usb_probe handler in Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ifusbprobe handler in the drivers/net/wireless/libertas/usb8xxx.ko module of the Linux kernel is related to a memory leak in the implementation. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a Marvell 8388 USB WLAN device. Thi...
CVE-2019-7229
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of...
CVE-2019-12592
CVE-2019-12592 affects the Evernote Web Clipper Chrome extension (pre-7.11.1). The vulnerability arises from a mis-handled URL construction in the extension’s iframe/injection framework, allowing a remote site to inject scripts via postMessage and inject a payload into all frames, effectively cau...
Universal Password Vulnerability in Water and Rainfall Data Distribution System of Hangzhou Yuanshi Technology Co.
Water and rain data release system is developed and technically supported by Hangzhou Yuanshi Technology Co., Ltd, which is a platform for water conservancy departments to publicize water and rain information. There is a universal password login vulnerability in the water and rain data...
CVE-2017-9382
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "file" as one of the service actions for a normal...
PT-2019-3113 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a double-free error caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. This error can lead to a denial of service. Recommendations: For Linux...
PT-2019-3349 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/line6/driver.c driver, which can be caused by a malicious USB device. This can lead to a denial of service. Recommendations:...
May 23, 2019—KB4499182 (Preview of Monthly Rollup)
None None...
May 23, 2019—KB4499184 (Preview of Monthly Rollup)
None None...
PT-2019-12644 · Miniupnp +1 · Miniupnpd +1
Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...
kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow
The usbdestroyconfiguration function, in 'drivers/usb/core/config.c' in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, du...
CVE-2019-8551
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting...
PT-2019-3109 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.14 Description: The issue is related to a NULL pointer dereference in the drivers/usb/misc/yurex.c driver, caused by a malicious USB device. This can lead to a denial of service. Recommendations: For Linux...
Rockwell Automation 1719-IRT4 Ex I/O 4 Channel Universal Temperature Input General Purpose Analog I/O
Binary data 754857.prm...