The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

IBM Water Operations for Waternamics and IBM Intelligent Operations Center Information Disclosure Vulnerability (CNVD-2019-25501)

IBM Intelligent Operations Center IOC and IBM Water Operations for Waternamics are both products of IBM Corporation, U.S.A. IBM Intelligent Operations Center is a suite of city operations solutions. IBM Intelligent Operations Center is a suite of city operations solutions with features such as da...

The vulnerability of the Deterministic Random Bit Generator component in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a attacker to obtain the secret key of the vulnerable device.

The vulnerability of the Deterministic Random Bit Generator DRBG component in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense devices is related to the use of a weak entropy source for generating cryptographic keys. Exploiting this vulnerability could allow an attacker...

Vulnerability of the software complex: Regional electronic budget. An integration platform related to insufficient protection of web page structures, allowing attackers to execute arbitrary JavaScript code in the user’s browser.

Vulnerability of the software complex: Regional electronic budget. The integration platform is associated with insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

Schneider Electric 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera Cross-Site Request Forgery Vulnerability

Schneider Electric 1st Gen Pelco Sarix Enhanced Camera and Schneider Electric Spectra Enhanced PTZ Camera are products of Schneider Electric, France. The Schneider Electric 1st Gen Pelco Sarix Enhanced Camera is a series of fixed IP cameras and the Schneider Electric Spectra Enhanced PTZ Camera i...

GitLab Authorization Issues Vulnerability (CNVD-2019-43039)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab. Th...

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer...

Apache Tomcat 9.0.x < 9.0.2 Insecure CGI Servlet Search Algorithm Description Weakness

Binary data 700704.pasl...

Apache Tomcat 7.0.x < 7.0.84 Insecure CGI Servlet Search Algorithm Description Weakness

Binary data 700676.pasl...

Apache Tomcat 8.0.x < 8.0.50 Security Constraint Weakness

Binary data 700687.pasl...

Apache Tomcat 7.0.x < 7.0.91 Open Redirect Weakness

Binary data 700681.pasl...

Apache Tomcat 9.0.x < 9.0.12 Open Redirect Weakness

Binary data 700709.pasl...

Apache Tomcat 8.5.x < 8.5.24 Insecure CGI Servlet Search Algorithm Description Weakness

Binary data 700692.pasl...

Apache Tomcat 8.5.x < 8.5.34 Open Redirect Weakness

Binary data 700696.pasl...

Apache Tomcat 8.0.45 < 8.0.48 Insecure CGI Servlet Search Algorithm Description Weakness

Binary data 700686.pasl...

Apache Tomcat 8.5.x < 8.5.28 Security Constraint Weakness

Binary data 700693.pasl...

Apache Tomcat 9.0.x < 9.0.5 Insecure CGI Servlet Search Algorithm Description Weakness

Binary data 700705.pasl...

Schneider Electric Quantum 140NOE771 Network Interface Module Fwupgrade Password Weakness

Binary data 720235.prm...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to gain access to protected information.

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...