6867 matches found
McAfee Advanced Threat Defense SB10304 Multiple Security Vulnerabilities
Description McAfee Advanced Threat Defense is prone to the following security vulnerabilities: 1. Multiple information disclosure vulnerabilities. 2. A remote command execution vulnerability 3. Directory-traversal vulnerability. 4. An SQL-injection vulnerability. 5. A security vulnerability...
Microsoft Windows Certificate Dialog CVE-2019-1388 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Window...
Microsoft Windows Win32k CVE-2019-1394 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows Graphics Component CVE-2019-1437 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1809 for 32-bit Systems Microsoft Windows 10 Version 1809 for ARM64-based Systems Microsoft...
SAP ERP Sales and S/4HANA Sales CVE-2019-0386 Remote Authorization Bypass Vulnerability
Description SAP ERP Sales and S/4HANA Sales are prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP Erp 6.0 SAP Erp 6.02 SAP Erp 6.03 SAP Erp 6.04...
Microsoft Windows CVE-2019-1384 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Technologies Affected Microsoft Windows 10 Version 1607 for...
Microsoft Windows Error Reporting CVE-2019-1374 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...
Microsoft Windows User Profile Service CVE-2019-1454 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to delete files and folders in an elevated context. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
Intel Xeon Scalable Processors CVE-2019-11139 Denial of Service Vulnerability
Description Intel Xeon Scalable Processors are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Intel Xeon Scalable Processors Redhat Enterprise Linux 5 Redhat Enterprise Linux 6 Redhat Enterprise Linux 7...
Microsoft Windows Graphics Component CVE-2019-1438 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Window...
Microsoft Windows Hyper-V CVE-2019-0712 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
Microsoft Exchange Server CVE-2019-1373 Remote Code Execution Vulnerability
Description Microsoft Exchange Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Open Enclave SDK CVE-2019-1370 Information Disclosure Vulnerability
Description Microsoft Open Enclave SDK is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Open Enclave SDK Recommendations Permit local access for trusted individual...
Microsoft Windows Hyper-V CVE-2019-0721 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1803 for x64-based Systems Microsoft Windows 10...
Microsoft Windows CVE-2019-1391 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Microsoft Windows UPnP Service CVE-2019-1405 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Window...
Microsoft Windows Hyper-V CVE-2019-1399 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows ...
Microsoft Windows Remote Procedure Call CVE-2019-1409 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...
Siemens Desigo PX CVE-2019-13927 Denial of Service Vulnerability
Description Siemens Desigo PX is prone to denial of service vulnerability Remote attackers may exploit this issue to cause denial-of-service conditions. Technologies Affected Siemens Desigo PX PXA40-W0 Siemens Desigo PX PXA40-W1 Siemens Desigo PX PXA40-W2 Siemens Desigo PX PXC00-E.D Siemens Desig...
Multiple Intel Products CVE-2019-0154 Denial of Service Vulnerability
Description Multiple Intel Products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Technologies Affected Intel 6th generation Core processors Intel 7th generation Core processors Intel 8th generation Core processors Intel...
SAP Treasury and Risk Management CVE-2019-0384 Remote Authorization Bypass Vulnerability
Description SAP Treasury and Risk Management is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP EA-FINSERV 6.0 SAP EA-FINSERV 6.03 SAP EA-FINSE...
IBM Spectrum Protect Plus CVE-2019-4652 Insecure File Permission Vulnerability
Description IBM Spectrum Protect Plus is prone to insecure file-permission vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. IBM Spectrum Protect Plus versions 10.1.0 through 10.1....
Envoy CVE-2019-18836 Remote Denial of Service Vulnerability
Description Envoy is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause denial of service conditions. Technologies Affected Envoy Envoy 1.12.0 Istio Istio 1.3.0 Istio Istio 1.3.1 Istio Istio 1.3.2 Istio Istio 1.3.3 Recommendations Block external access ...
Fortinet FortiOS CVE-2019-15705 Denial of Service Vulnerability
Description Fortinet FortiOS is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. Technologies Affected Fortinet FortiOS 4.3.10 Fortinet FortiOS 4.3.12 Fortinet FortiOS 4.3.13 Fortinet FortiOS 4.3.14 Fortinet FortiOS 4.3.8 Fortinet...
Fortinet FortiClient for macOS CVE-2019-15704 Local Information Disclosure Vulnerability
Description Fortinet FortiClient for macOS is prone to a local information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. Versions prior to FortiClient for macOS 6.0.8 and 6.2.1 are vulnerable. Technologies...
Multiple Medtronic Products ICSMA-19-311-02 Multiple Security Vulnerabilities
Description Multiple Medtronic Products are prone to multiple security vulnerabilities. An attacker can exploit these issues to gain unauthorized access or obtain sensitive information that may aid in brute-force attacks. Other attacks are also possible. Technologies Affected Medtronic Valleylab...
Linux Kernel Use After Free and Multiple Memory Leak Denial of Service Vulnerabilities
Description Linux Kernel is prone to multiple denial-of-service vulnerabilities. Successful exploitation of these issues to execute arbitrary code, and to cause excessive memory consumption, resulting in a denial-of-service condition. Linux kernel versions through 5.3.9 are vulnerable. Technologi...
Multiple Medtronic Products ICSMA-19-311-01 Multiple Security Vulnerabilities
Description Multiple Medtronic Products are prone to multiple security vulnerabilities. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions or obtain sensitive information that may aid in launching further attacks. Technologies Affect...
Linux Kernel Multiple Memory Leak Denial of Service Vulnerabilities
Description Linux Kernel is prone to multiple denial-of-service vulnerabilities. Successful exploitation of these issues will cause excessive memory consumption, resulting in a denial-of-service condition. Linux kernel versions prior to 5.3.5 are vulnerable. Technologies Affected Linux kernel 2.6...
Philips Tasy EMR CVE-2019-13557 Information Disclosure Vulnerability
Description Philips Tasy EMR is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain unauthorized access to sensitive information. This may lead to further attacks. Philips Tasy EMR version 3.02.1744 and prior are affected. Philips Tasy WebPortal version...
FriBidi CVE-2019-18397 Stack Buffer Overflow Vulnerability
...
PHP CVE-2019-11050 Denial of Service Vulnerability
Description PHP is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service condition. PHP versions prior to 7.4.1 are vulnerable. Technologies Affected PHP PHP 7.0.0 PHP PHP 7.0.1 PHP PHP 7.0.10 PHP PHP 7.0.11 PHP PHP 7.0.12 PHP PHP 7.0.13 PHP PHP...
OpenStack Mistral CVE-2019-3866 Local Information Disclosure Vulnerability
Description OpenStack Mistral is prone to a local information-disclosure vulnerability. An attacker may leverage this issue to obtain potentially sensitive information that may aid in further attacks. Technologies Affected OpenStack Mistral Redhat OpenStack Platform 10 Redhat OpenStack Platform...
Fuji Electric V-Server CVE-2019-18240 Multiple Heap Based Buffer Overflow Vulnerabilities
Description Fuji Electric V-Server is prone to multiple unspecified heap-based buffer overflow vulnerabilities. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions...
Cisco Wireless LAN Controller CVE-2019-15276 Denial of Service Vulnerability
Description Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause a restart to the device, resulting in denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCvp92098. Technologies Affected Cisco Wireles...
Multiple Cisco Products CVE-2019-15967 Local Security Bypass Vulnerability
Description Multiple Cisco Products are prone to a local security-bypass vulnerability. An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. This issue is being tracked by Cisco Bug ID CSCvq29891. Technologi...
Cisco Web Security Appliance CVE-2019-15969 Cross Site Scripting Vulnerability
Description Cisco Web Security Appliance is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...
Drupal Open Social SA-CONTRIB-2019-075 Session Fixation Vulnerability
Description Drupal Open Social is prone to a session-fixation vulnerability. An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application. Drupal Open Social 8.x-7.0, and 8.x-6.0 through 8.x-6.4 are vulnerable. Technologies Affected...
Cisco Managed Services Accelerator CVE-2019-15974 Open Redirection Vulnerability
Description Cisco Managed Services Accelerator is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link,...
Cisco Web Security Appliance CVE-2019-15956 Unauthorized Access Vulnerability
Description Cisco Web Security Appliance is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvp51493. Technologies Affected...
Multiple Cisco Products CVE-2019-15289 Denial of Service Vulnerability
Description Multiple Cisco Products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCvq12177, CSCvq29889 and CSCvq65302. Technologies Affected Cisco RoomOS Software Cisco...
Google Android System Component Multiple Security Vulnerabilities
Description Google Android is prone to multiple security vulnerabilities. An attacker can leverage these issues to gain sensitive information, elevate privileges or execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues...
Multiple Cisco WebEx Products Multiple Arbitrary Code Execution Vulnerabilities
Description Multiple Cisco WebEx products are prone to multiple local code-execution vulnerabilities. Successfully exploiting these issues will allow attackers to execute arbitrary code within the context of the application. These issues are being tracked by Cisco Bug IDs CSCvq32301, CSCvq36083,...
Atlassian Jira Service Desk Server and Data Center Multiple Security Vulnerabilities
Description Atlassian Jira Service Desk Server and Jira Service Desk Data Center are prone to multiple security vulnerabilities. An attacker can exploit these issues using directory-traversal characters â../â to access or read arbitrary files outside of the restricted directory, or bypass certain...
Multiple Cisco Products CVE-2019-15958 Remote Code Execution Vulnerability
Description Multiple Cisco Products are prone to an remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application. This issue is being tracked by Cisco Bug IDs CSCvp79419, CSCvp79611 . Technologies...
Apache CXF Denial of Service and Unauthorized Access Vulnerabilities
Description Apache CXF is prone to a denial-of-service vulnerability and an unauthorized access vulnerability. Attackers can exploit these issues to cause a denial-of-service condition and bypass certain security restrictions and gain unauthorized access; this may aid in launching further attacks...
Cisco Webex Meetings CVE-2019-15960 Remote Privilege Escalation Vulnerability
Description Cisco Webex Meetings is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain elevated privileges on the affected devices. This issue is tracked by Cisco Bug ID CSCvq37564. Technologies Affected Cisco WebEx Meetings Cisco Webex Meetings...
Cisco Small Business RV Series Routers CVE-2019-15957 Remote Command Injection Vulnerability
Description Cisco Small Business RV Series Routers are prone to a remote command injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected device. This issue is being tracked by Cisco Bug IDs...
Cisco Small Business RV Series Routers CVE-2019-15271 Arbitrary Command Execution Vulnerability
Description Cisco Small Business RV Series Routers are prone to an arbitrary command-execution vulnerability. An attacker can exploit this issue to execute arbitrary commands on the affected device with root privileges. This issue is being tracked by Cisco Bug IDs CSCvq95596, CSCvq97028,...
Cisco Small Business SPA500 Series IP Phones CVE-2019-15959 Local Command Injection Vulnerability
Description Cisco Small Business SPA500 Series IP Phones are prone to a local command-injection vulnerability. Local attackers can exploit this issue to execute arbitrary commands on the device in an elevated security context. This issue is being tracked by Cisco Bug ID CSCvp40755. Cisco Small...