6424 matches found
CVE-2019-10844: Undefined Security Weakness
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...
Google Chrome Shell Integration External Program Execution
The vulnerability of Shell Integration in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute external programs using a specially created HTML page...
DEBIAN-CVE-2019-5421
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The Devise::Models::Lockable class, more specifically at the incrementfailedattempts method. File location: lib/devise/models/lockable.rb that can result in Multiple concurrent requests c...
Debian DLA-1747-1 : firmware-nonfree security update
Eli Biham and Lior Neumann discovered a cryptographic weakness in the Bluetooth LE SC pairing protocol, called the Fixed Coordinate Invalid Curve Attack CVE-2018-5383. Depending on the devices used, this could be exploited by a nearby attacker to obtain sensitive information, for denial of servic...
HYBBS Cross-Site Request Forgery Vulnerability
HYBBS is a lightweight community forum program. A cross-site request forgery vulnerability exists in the /?admin/user.html page in HYBBS version 2.2, which originates from a WEB application that does not adequately validate whether a request is from a trusted user. An attacker could exploit this...
CVE-2019-10477: Undefined Security Weakness
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...
Matrix Storage Manager Driver Privilege Escalation
The vulnerability of the driver that enables the operation of RAID arrays in Matrix Storage Manager is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2019-3852: Undefined Security Weakness
A vulnerability was found in moodle before version 3.6.3. The getwithcapabilityjoin and getusersbycapability functions were not taking context freezing into account when checking user capabilities...
Cisco NX-OS Privilege Escalation
The vulnerability of the Bash shell implementation of the Cisco NX-OS network operating system in Cisco devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Cisco NX-OSS Privilege Escalation
The vulnerability of the file system configuration settings in the Cisco NX-OSS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...
Semmle: CSP : Inline scripts can be inserted
Vulnerable URL:- https://lgtm-com.pentesting.semmle.net/ Summery Content Security Policy CSP is a client-side security model which allows developers to specify where different types of resources should be loaded, executed and embedded from. With CSP you can instruct the browser only to load...
CVE-2019-9870: Undefined Security Weakness
plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...
CVE-2019-5616: Undefined Security Weakness
CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser...
CVE-2019-9768: Undefined Security Weakness
Thinkst Canarytokens through commit hash 4e89ee0 2019-03-01 relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token...
hxterm service Privilege Escalation
The vulnerability of the hxterm service in Cisco HyperFlex hyperconverged infrastructure is related to insufficient authentication control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2019-9573: Undefined Security Weakness
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
CVE-2019-9563: Undefined Security Weakness
In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads...
PT-2019-6215
Name of the Vulnerable Software and Affected Versions ILC 1x0 versions affected versions not specified ILC 1x1 versions affected versions not specified ILC 1x1 GSM/GPRS versions affected versions not specified ILC 3xx versions affected versions not specified AXC 1050 versions affected versions no...
Linux: MAC algorithms
This variable limits the types of MAC algorithms that SSH can use during communication. MD5 and 96-bit MAC algorithms are considered weak and have been shown to increase exploitability in SSH downgrade attacks. Weak algorithms continue to have a great deal of attention as a weak spot that can be...