PT-2020-3122

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject arbitrary shell...

PT-2020-3110

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall affected versions not specified Cisco RV215W Wireless-N VPN Router affected versions not specified Description The issue is related to insufficient validation of user-supplied input data in the web-based...

PT-2020-3135

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface of Cisco Data Center Network Manager DCNM, which...

PT-2020-3128

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to a problem with the web-based management interface of Cisco SD-WAN vManage Software, where an incorrect link resolution before accessing a file ca...

PT-2020-3109

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W versions not specified Cisco Small Business RV130 versions not specified Cisco Small Business RV130W versions not specified Cisco Small Business RV215W versions not specified Description The issue is related to...

PT-2020-3108

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W versions affected versions not specified Cisco Small Business RV130 versions affected versions not specified Cisco Small Business RV130W versions affected versions not specified Cisco Small Business RV215W versions...

PT-2020-3132

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified Description The issue is related to errors in HTTP request authorization in the web-based...

PT-2020-3126

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to a cross-site scripting XSS attack in the web-based management interface. This occurs because the interface does not properly validate user-suppli...

PT-2020-3134

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface of Cisco Data Center Network Manager DCNM, which...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

Windows Font Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts. For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely. For systems running Windows 10, an attacker who...

Microsoft Edge PDF Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

GDI+ Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

Windows Imaging Component Information Disclosure Vulnerability

An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system. There are multiple ways an attacker...

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...

Cisco Wireless LAN Controller Software Cross-Site Request Forgery (cisco-sa-20190417-wlc-csrf)

According to its self-reported version, a Cross-site request forgery XSRF vulnerability exists in Cisco Wireless LAN Controller due to insufficient XSRF protections for the web-based management interface. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Denial of Service Vulnerability in Dragonfly FM App

Dragonfly FM is a web-based audio application. A denial of service vulnerability exists in Dragonfly FM App, which can be exploited by an attacker to cause the program to stop running...