6867 matches found
WebKit Multiple Memory Corruption Vulnerabilities
Description WebKit is prone to multiple memory-corruption vulnerabilities. A remote attacker can leverage these issues to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Ipa...
Apple macOS Multiple Security Vulnerabilities
Description Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Technologies Affected Apple macOS 10.12 Apple macOS 10.12.1 Apple macO...
Apple iOS and iPadOS Multiple Local Security Vulnerabilities
Description Apple iOS and iPadOS are prone to multiple local security vulnerabilities. An attacker can exploit these issues to obtain sensitive information, execute arbitrary code and gain elevated privileges. Failed exploit attempts will likely cause a denial-of-service condition. Technologies...
Samba CVE-2019-10218 Path Traversal Arbitrary File Write Vulnerability
Description Samba is prone to an arbitrary file write vulnerability. Successful exploits may allow an attacker to write arbitrary files to the affected system. This may aid in further attacks. Technologies Affected Samba Samba 3.4.0 Samba Samba 3.4.1 Samba Samba 3.4.10 Samba Samba 3.4.11 Samba...
Apple macOS/watchOS/iCloud for Windows CVE-2019-8750 Memory Corruption Vulnerability
Description Apple macOS, watchOS and iCloud for Windows are prone to a memory corruption vulnerability. Attackers can exploit this issue to execute arbitrary code and perform unauthorized actions. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Wat...
Samba CVE-2019-14833 Remote Security Bypass Vulnerability
Description Samba is prone to a security-bypass vulnerability. Successful exploit may allow attackers to bypass certain security restrictions and gain unauthorized access to resources. Samba versions 4.5.0 and later are vulnerable. Technologies Affected Samba Samba 4.10.1 Samba Samba 4.10.2 Samba...
Apple iTunes and macOS CVE-2019-8801 DLL Loading Arbitrary Code Execution Vulnerability
Description Apple iTunes and macOS are prone to an arbitrary code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition. Technologies Affected Apple...
Samba CVE-2019-14847 Remote Denial of Service Vulnerability
Description Samba is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Samba version 4.0.0 through 4.10.9 are vulnerable. Technologies Affected Samba Samba 4.0.0 Samba Samba 4.0.1 Samba Sam...
Multiple Trend Micro Products CVE-2019-18189 Unspecified Directory Traversal Vulnerability
Description Multiple Trend Micro products are prone to an unspecified directory-traversal vulnerability. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to access arbitrary files that contain sensitive information. This may aid in further attacks. The...
phpMyAdmin CVE-2019-18622 SQL Injection Vulnerability
Description phpMyAdmin is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
Broadcom Brocade SANnav CVE-2019-16210 Information Disclosure Vulnerability
Description Broadcom Brocade SANnav is prone to an information disclosure vulnerability Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks or cause a denial-of-service condition. Versions prior to Brocade SANnav 2.0 are...
Trend Micro Apex One CVE-2019-18188 Command Injection Vulnerability
Description Trend Micro Apex One is prone to a command-injection vulnerability because it fails to properly sanitize user-supplied input. Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts will...
Broadcom Brocade SANnav CVE-2019-16207 Hardcoded Credentials Vulnerability
Description Broadcom Brocade SANnav is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable system and perform unauthorized actions. Versions prior to Brocade SANnav 2.0 are vulnerable. Technologies Affected Broadcom...
Broadcom Brocade SANnav CVE-2019-16209 SSL Certificate Validation Security Bypass Vulnerability
Description Broadcom Brocade SANnav is prone to a security-bypass vulnerability. An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks. Versions prior to Brocade SANnav 2.0 are vulnerable. Technologies...
Broadcom Brocade SANnav CVE-2019-16206 Information Disclosure Vulnerability
Description Broadcom Brocade SANnav is prone to an information disclosure vulnerability Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks or cause a denial-of-service condition. Versions prior to Brocade SANnav 2.0 are...
Apple tvOS/iOS/iPadOS CVE-2019-8795 Memory Corruption Vulnerability
Description Apple iOS, iPad and tvOS are prone to a memory-corruption vulnerability. A remote attacker can leverage this issue to execute arbitrary code with system privileges. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Ipad Mini- Apple TV App...
Apple iOS/iPadOS/tvOS/watchOS/macOS Multiple Security Vulnerabilities
Description Apple iOS, iPadOS, tvOS, watchOS and macOS are prone to the following security vulnerabilities: 1. A denial-of-service vulnerability 2. An authentication-bypass vulnerability 3. Multiple memory-corruption vulnerabilities 4. An information disclosure vulnerability An attacker can...
Broadcom Brocade SANnav CVE-2019-16205 Session Hijacking Vulnerability
Description Broadcom Brocade SANnav is prone to a session-hijacking vulnerability. An attacker can exploit this issue to hijack another user's session and gain unauthorized access to the victim's account on the affected system. Versions prior to Brocade SANnav 2.0 are vulnerable. Technologies...
Fortinet FortiExtender CVE-2019-15710 OS Command Injection Vulnerability
Description Fortinet FortiExtender is prone to an OS command-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further...
Broadcom Brocade SANnav CVE-2019-16208 Weak Encryption Security Weakness
Description Broadcom Brocade SANnav is prone to a security weakness. Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks. Versions prior to Brocade SANnav 2.0 are vulnerable. Technologies Affected Broadcom Brocade SANnav...
WebKit Cross Site Scripting and Multiple Memory Corruption Vulnerabilities
Description WebKit is prone to a cross-site scripting vulnerability and multiple memory-corruption vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site or execute arbitrary code in the...
Trend Micro OfficeScan CVE-2019-18187 Directory Traversal Vulnerability
Description Trend Micro OfficeScan is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue using directory-traversal characters '../' to access or read arbitrary files that contain sensitive information or t...
McAfee Total Protection Windows Client CVE-2019-3636 Local Security Bypass Vulnerability
Description McAfee Total Protection Windows client is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Versions prior to McAfee Total Protection 16.0.R...
Symantec SONAR Security Bypass
SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec SONAR component. AFFECTED PRODUCTS Component: SONAR Engine --- CVE | Affected Versions | Remediation CVE-2019-12752 | Prior to 12.0.2 | Upgrade to 12.0.2 Note: Live updatable; no action required by...
GNU GRUB2 'grub2-set-bootflag' Utility Local Denial of Service Vulnerability
Description GNU GRUB2 is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected GNU GRUB2 Redhat Enterprise Linux 8 Recommendations Permit local access for trusted individuals only. Where possible, us...
Multiple VMware Products CVE-2019-5536 Denial of Service Vulnerability
Description Multiple VMware products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected VMWare Esxi 6.5 VMWare Esxi 6.7 VMWare Fusion 11.0 VMWare Fusion 11.0.1 VMWare Fusion 11.0.2 VMWare Fusion 11.0.3...
Elasticsearch Logstash Beats Input Plugin CVE-2019-7620 Denial of Service Vulnerability
Description Elasticsearch Logstash is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the the application to stop responding, denying service to legitimate users. Technologies Affected Elasticsearch Logstash 1.0.14 Elasticsearch Logstash 1.0.15 Elasticsearc...
Philips IntelliSpace Perinatal CVE-2019-13546 Local Security Bypass Vulnerability
Description Philips IntelliSpace Perinatal is prone to a local security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Philips IntelliSpace Perinatal versions K and prior are...
VMware vCenter Server Appliance Multiple Information Disclosure Vulnerabilities
Description VMware vCenter Server Appliance is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to obtain sensitive information that may aid in further attacks. VMware vCenter Server 6.5 and 6.7 are vulnerable; other versions may also be affected...
Elasticsearch CVE-2019-7619 Information Disclosure Vulnerability
Description Elasticsearch is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. Versions prior to Elasticsearch 7.4.0 or 6.8.4 are vulnerable. Technologies Affected Elasticsearch...
Honeywell IP-AK2 CVE-2019-13525 Information Disclosure Vulnerability
Description Honeywell IP-AK2 is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. Honeywell IP-AK2 Access Control Panel version 1.04.07 and prior are vulnerable. Technologies Affected Honeywell...
NetApp Clustered Data ONTAP CVE-2019-5508 Denial of Service Vulnerability
Description NetApp Clustered Data ONTAP is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions. Clustered Data ONTAP 9.2 through 9.6 versions are vulnerable. Technologies Affected NetApp Clustered Data ONTAP 9.2 NetApp Clustere...
IBM Security Guardium Big Data Intelligence CVE-2019-4311 Information Disclosure Vulnerability
Description IBM Security Guardium Big Data Intelligence is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Security Guardium Big Data Intelligence 4.0 is vulnerable; other versions may also be...
Qt QtBase Module CVE-2019-18281 Denial of Service Vulnerability
Description Qt QtBase module is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Qt QtBase module version 5.11.x and 5.12.x prior to 5.12.5 are vulnerable. Technologies Affected Qt Qt Base 5.11.0...
D-Link DAP-1320 Wireless Range Extender CVE-2019-17505 Information Disclosure Vulnerability
Description D-Link DAP-1320 Wireless Range Extender is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information and perform unauthorized actions. D-Link DAP-1320 Rev A2 version 1.21 is vulnerable. Other versions may also be affected...
Rittal Chiller ICSA-19-297-01 Authentication Bypass and Hardcoded Credentials Vulnerabilities
Description Rittal Chiller is prone to the following security vulnerabilities: 1. An authentication bypass vulnerability 2. A hard-coded credentials vulnerability An attacker can exploit these issues to bypass the authentication mechanism and gain unauthorized access to the affected device. This...
PHP CVE-2019-11043 Remote Code Execution Vulnerability
Description PHP is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected PHP PHP 7.0 PHP...
IBM Liberty for Java for Cloud Multiple Security Vulnerabilities
Description IBM Liberty for Java for Cloud is prone to an information-disclosure and security bypass vulnerabilities. Attackers can exploit these issues to bypass certain security restrictions or obtain sensitive information which may lead to further attacks. Technologies Affected IBM...
Adobe Acrobat and Reader CVE-2019-8237 Security Bypass Vulnerability
Description Adobe Acrobat and Reader are prone to a security-bypass vulnerability. Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Adobe Acrobat 2017.008.3005...
IBM Cloud Orchestrator CVE-2019-4399 Information Disclosure Vulnerability
Description IBM Cloud Orchestrator is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. The following versions are vulnerable: IBM Cloud Orchestrator 2.5, 2.5.0.1, 2.5.0.2, 2.5.0.3,...
IBM Cloud Orchestrator CVE-2019-4398 Local Information Disclosure Vulnerability
Description IBM Cloud Orchestrator is prone to local information-disclosure vulnerability. Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks. IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise versions 2.5, 2.5.0.1, 2.5.0.2,...
IBM Security Guardium Big Data Intelligence CVE-2019-4314 Information Disclosure Vulnerability
Description IBM Security Guardium Big Data Intelligence is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Security Guardium Big Data Intelligence 4.0 is vulnerable; other versions may also be...
Multiple IBM Products CVE-2019-4459 Cross Site Scripting Vulnerability
Description Multiple IBM Products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Multiple IBM Products CVE-2019-4400 Directory Traversal Vulnerability
Description Multiple IBM Products are prone to a directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to read arbitrary files that contain sensitive information or to access files outside of the restricted directory to obtain sensitive...
Multiple Jenkins Plugins Multiple Security Vulnerabilities
...
OpenSC Multiple Denial of Service Vulnerabilities
Description OpenSC is prone to multiple denial-of-service vulnerabilities. An attacker can exploit this issue to cause denial-of-service conditions. OpenSC through version 0.19.0 and 0.20.x through 0.20.0-rc3 are vulnerable. Technologies Affected Opensc-Project Opensc 0.10.0 Opensc-Project Opensc...
Multiple IBM Products CVE-2019-4395 Local Information Disclosure Vulnerability
Description Multiple IBM products are prone to a local information-disclosure vulnerability. Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks. Technologies Affected IBM Cloud Orchestrator 2.4 IBM Cloud Orchestrator 2.4.0.1 IBM Cloud...
Multiple IBM Products CVE-2019-4461 HTTP Response Splitting Vulnerability
Description Multiple IBM Products are prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of...
Multiple IBM Products CVE-2019-4394 Local Security Vulnerability
Description Multiple IBM Products are prone to a local security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Technologies Affected IBM Cloud Orchestrator 2.4 IBM Cloud Orchestrator 2.4.0.1 IBM...
Adobe Acrobat and Reader CVE-2019-8238 Information Disclosure Vulnerability
Description Adobe Acrobat and Reader are prone to information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Adobe Acrobat 2017.008.30051 Adobe Acrobat 2017.011.30059 Adobe Acrobat...