The vulnerability of the Azure DevOps Server software development tools’ setup arises from insufficient validation of input data. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Azure DevOps Server software development tools exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of protected information by sending specially crafted payloads ...

Foxit Studio Photo Remote Code Execution Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacker...

CVE-2019-1841

A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1837

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

PT-2019-11366 · Jenkins · Jenkins Audit To Database Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Audit to Database Plugin affected versions not specified Description: A cross-site request forgery issue exists in the DbAuditPublisherDescriptorImpldoTestJdbcConnection form validation method, allowing attackers to initiate a...

The vulnerability of the parseAuthorizationHeader function in the Live555 library of the liblivemedia package allows a attacker to execute arbitrary code or cause a service denial.

The vulnerability of the parseAuthorizationHeader function in the Live555 library from the liblivemedia package exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

The vulnerability of the Intel Converged Security and Manageability Engine implementation, which stems from insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

CVE-2019-1754

A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged level 1, remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to improper validation of user privileges of web UI users. An attacker...

Cisco IOS and IOS XE Input Validation Vulnerability (CNVD-2019-08717)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Network-Based Application Recognition NBAR feature in Cisco IOS and IOS XE, which stems from a parsing problem in the program that could be exploited by ...

Cisco IOS and IOS XE Input Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Network-Based Application Recognition NBAR feature in Cisco IOS and IOS XE, which stems from a parsing problem in the program that could be exploited by ...

PT-2019-15165 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 affected versions not specified Description: A vulnerability in the ingress traffic validation could allow an unauthenticated, adjacent attacker...

WIKINDX Cross-Site Scripting Vulnerability

Wikindx is a suite of virtual research environments online bibliography and quote/notes management and article creation system. A cross-site scripting vulnerability exists in Wikindx versions prior to 5.7.0, which stems from a lack of proper validation of client-side data by the WEB application. ...

Intel Graphics Driver for Windows Kernel Mode Driver Arbitrary Code Execution Vulnerability (CNVD-2019-26188)

Intel Graphics Driver for Windows is an Intel graphics driver for the Windows platform.Kernel Mode Driver is one of the kernel mode drivers. A security vulnerability exists in the Kernel Mode Driver of the Intel Graphics Driver for Windows platforms, which arises from the program failing to perfo...

GHSA-GF2V-9HP6-44QG org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation

Apache Hive JDBC + HiveServer2 implements SSL for plain TCP and HTTP connections it supports both transport modes. While validating the server's certificate during the connection setup, the client in Apache Hive before 1.2.2 and 2.0.x before 2.0.1 doesn't seem to be verifying the common name...

The vulnerability of the Cluster Service Manager component in Cisco HyperFlex hyperconverged infrastructure allows a attacker to execute arbitrary commands.

The vulnerability of the Cluster Service Manager component in the Cisco HyperFlex hyperconverged infrastructure is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Pixar Renderman Input Validation Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Helper tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to read the root file from...

CVE-2019-1614

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

CVE-2019-1605

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTT...

Cisco Nexus 9000 ACI Mode Arbitrary File Read Vulnerability

The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. An arbitrary file read vulnerability exists in the Cisco Nexus 9000 Series ACI mode switches. The vulnerability stems from the lack of a proper input and validation checking mechanism for...