Denial Of Service (DoS)

krb5 is vulnerable to denial of service. Multiple input validation flaws were found in the MIT Kerberos GSS-API library's implementation of the SPNEGO mechanism. A remote attacker could use these flaws to crash any network service utilizing the MIT Kerberos GSS-API library to authenticate users o...

Denial Of Service (DoS)

krb5 is vulnerable to denial of service. Multiple input validation flaws were found in the MIT Kerberos GSS-API library's implementation of the SPNEGO mechanism. A remote attacker could use these flaws to crash any network service utilizing the MIT Kerberos GSS-API library to authenticate users o...

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module allows a intruder to cause a service failure.

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module is related to insufficient data validation during the processing of UDP traffic. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially created UDP packets...

IBM Spectrum Protect Plus Arbitrarily Delete Directory Vulnerability

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

The vulnerabilities of anti-virus software programs Worry-Free Business Security, Apex One, and OfficeScan stem from insufficient validation of input data. This allows attackers to bypass content validation and manipulate the components of the client agent.

The vulnerability of anti-virus software programs such as Worry-Free Business Security, Apex One, and OfficeScan exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass content validation and manipulate the client agent components...

Chadha Software Technologies PHPKB Standard Multi-Language Cross-Site Scripting Vulnerability (CNVD-2020-17948)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site scripting vulnerability exists in the way URIs are handled in the admin/header.php file in Chadha Software Technologies...

The vulnerability of the McAfee Advanced Threat Defense software arises from insufficient validation of input data, allowing a perpetrator to gain unauthorized access to the atduser account information.

The vulnerability of the McAfee Advanced Threat Defense security tool exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain unauthorized access to the atduser account through specially crafted GET requests...

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of Intel Active Management Technology’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute cross-site scripting XSS attacks...

The vulnerabilities of the ViPNet Coordinator HW 4 and ViPNet Coordinator KB 4 systems, related to insufficient validation of input data, allow attackers to exploit these systems to exhaust network resources by combining deleted attacks with the use of fragmented packets.

The vulnerabilities of the ViPNet Coordinator HW 4 and ViPNet Coordinator KB 4 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause network resources to be exhausted, resulting in a reboot of the ViPNet Coordinator due to an internal...

The vulnerability of the DIGSI 5 software and SIPROTEC 5 devices, which stems from insufficient validation of input data, allows attackers to trigger service interruptions.

The vulnerability of the DIGSI 5 software and the SIPROTEC 5 devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets to port 443/TCP...

The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.

The multiple vulnerabilities of the Webvrpcs software for remote monitoring from Advantech WebAccess are related to deficiencies in the validation of input data before copying them into a dynamically allocated fixed-length buffer. Exploiting these vulnerabilities could allow a malicious actor to...

CVE-2019-15248

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

The vulnerability of the Unified Contact Center Express software solution lies in insufficient validation of input data. This allows a perpetrator to carry out an attack on the target system from the server side and perform unauthorized actions.

The vulnerability of the Cisco Unified Contact Center Express automation software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out an attack on the target system from the server side, enabling unauthorized actions by sending...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

CVE-2019-12712

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient...

CVE-2019-1924

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced...

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s software infrastructure lies in improper validation of input data in NFVIS file system commands. This allows attackers to read or rewrite any files at will.

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s software infrastructure is related to improper validation of input data in the file system’s command files. Exploiting this vulnerability allows a malicious actor to read or rewrite any arbitrary files remotely...

CVE-2019-1906

A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure PI could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could...

The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing attackers to escalate their privileges.

The vulnerability of the Intel Active Management Technology remote access implementation exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the command-line interface of Cisco UCS Blade Series B software allows a hacker to write arbitrary files.

The vulnerability of the command-line interface of Cisco UCS Blade series B micro-programming system software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to write arbitrary files by modifying the command-line interface parameters...