Cisco Small Business Smart and Managed Switches CVE-2019-12718 Cross Site Scripting Vulnerability

Description Cisco Small Business Smart and Managed Switches are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Cisco Identity Services Engine CVE-2019-12637 Multiple HTML Injection Vulnerabilities

Description Cisco Identity Services Engine is prone to multiple HTML-injection vulnerabilities because it fails to properly validate user-supplied input. Successful exploits will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application...

Cisco Aironet Access Points CVE-2019-15260 Unauthorized Access Vulnerability

Description Cisco Aironet Access Points is prone to an unauthorized access vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions, gain elevated privileges. This may aid in launching further attacks. This issue is tracked by Cisc...

Ansible CVE-2019-14864 Multiple Information Disclosure Vulnerabilities

Description Ansible is prone to multiple information-disclosure vulnerabilities. Successfully exploiting these issues may allow an attacker to obtain sensitive information that may aid in further attacks. Technologies Affected AnsibleWorks ansible Redhat Ansible Engine 2 Recommendations Block...

Multiple Cisco Products CVE-2019-15264 Denial of Service Vulnerability

Description Multiple Cisco Products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCvo40697. Technologies Affected Cisco Aironet 1540 Series Access Points Cisco Aironet 1560...

Linux Kernel CVE-2019-17666 Buffer Overflow Vulnerability

Description Linux Kernel is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to cause a denial-of-service condition. Due to the nature of this issue, code...

Cisco Firepower Management Center CVE-2019-15270 HTML Injection Vulnerability

Description Cisco Firepower Management Center is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attack...

Cisco Wireless LAN Controller CVE-2019-15262 Denial of Service Vulnerability

Description Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to exhaust resources, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCvp34148. Technologies Affected Cisco Wireless Lan Controller...

Cisco TelePresence CE Software CVE-2019-15275 Local Privilege Escalation Vulnerability

Description Cisco TelePresence Collaboration Endpoint Software is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary commands with root level privileges. This issue is being tracked by Cisco Bug IDs CSCvq29890 and CSCvq29895. Versions...

Jenkins Plugins Multiple Security Vulnerabilities

...

Drupal Booking and Availability Management Tools Module Access Bypass Vulnerability

Description The Booking and Availability Management Tools BAT module for Drupal is prone to an access-bypass vulnerability. Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks. Booking and Availability...

Foxit PhantomPDF Multiple Security Vulnerabilities

Description Foxit PhantomPDF is prone to the following vulnerabilities: 1. Multiple arbitrary code-execution vulnerabilities 2. An information disclosure vulnerability 3. A stack-based buffer-overflow vulnerability Attackers can exploit these issues to execute arbitrary code in the context of...

Cisco SPA100 Series Analog Telephone Adapters CVE-2019-15258 Denial of Service Vulnerability

Description Cisco SPA100 Series Analog Telephone Adapters are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCvq50529. Technologies Affected Cisco Small Business Voice...

Cisco SPA100 Series Analog Telephone Adapters CVE-2019-12704 Information Disclosure Vulnerability

Description Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq50503. Technologies Affected...

Cisco Firepower Management Center CVE-2019-15280 HTML Injection Vulnerability

Description Cisco Firepower Management Center is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attack...

Cisco SPA100 Series Analog Telephone Adapter Multiple Arbitrary Code Execution Vulnerabilities

Description Cisco SPA100 Series Analog Telephone Adapter is prone to multiple arbitrary code-execution vulnerabilities. Successfully exploiting these issues will allow attackers to execute arbitrary code with elevated privileges. These issues are being tracked by Cisco Bug ID CSCvq50494...

Cisco Expressway Series and Telepresence VCS CVE-2019-12705 Cross Site Scripting Vulnerability

Description Cisco Expressway Series and Telepresence Video Communication Server VCS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Apache Thrift CVE-2019-0205 Denial of Service Vulnerability

Description Apache Thrift is prone to a denial-of-service vulnerability. Attackers may leverage this issue to cause the application enter into endless loop, denying service to legitimate users. Apache Thrift version 0.12.0 and prior are vulnerable. Technologies Affected Apache Thrift 0.10.0 Apach...

Cisco Wireless LAN Controller Software CVE-2019-15266 Local Directory Traversal Vulnerability

Description Cisco Wireless LAN Controller Software is prone to a local directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to access or read arbitrary files that contain sensitive information or to access files outside of the restricted...

Cisco TelePresence CE Software CVE-2019-15274 Local Command Injection Vulnerability

Description Cisco TelePresence CE Software is prone to a local command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands. This issue being tracked by Cisco Bug IDs CSCvq29893. Technologies Affected Cisco TelePresence CE Software 8.0.0 Cisco...

SQLite CVE-2019-8457 Out of Bounds Read Heap Buffer Overflow Vulnerability

Description SQLite is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed...

Cisco SPA100 Series Analog Telephone Adapters CVE-2019-12702 Cross Site Scripting Vulnerability

Description Cisco SPA100 Series Analog Telephone Adapters are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

ISC BIND CVE-2019-6475 Authentication Bypass Vulnerability

Description ISC BIND is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to perform unauthorized actions. This may aid in further attacks. ISC BIND versions 9.14.0 through 9.14.6, and 9.15.0 through 9.15.4 are vulnerable. Technologies Affected ISC Bind 9.14.0 IS...

Oracle Primavera P6 Enterprise Project Portfolio Management Remote Security Vulnerability

Description Oracle Primavera P6 Enterprise Project Portfolio Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Web Access' component is affected. This vulnerability affects the following supported versions: 17.1.0 through...

Oracle MySQL Server Cpuoct2019 Multiple Security Vulnerabilities

Description Oracle MySQL Server is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'MySQL Protocol' protocol. The 'InnoDB' and 'Server: Optimizer' components are affected. These vulnerabilities affect the following supported versions: 8.0.16 and prior...

Oracle Java SE/Java SE Embedded CVE-2019-2996 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Deployment' component. This vulnerability affects the following supported versions: Java SE: 8u221; Java SE Embedded:...

Oracle Forms CVE-2019-2886 Remote Security Vulnerability

Description Oracle Forms is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Services' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Forms 12.2.1.3.0...

Oracle MySQL Server Cpuoct2019 Multiple Security Vulnerabilities

Description Oracle MySQL Server is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'MySQL Protocol' protocol. The 'Server: Optimizer' and 'Information Schema' components are affected. These vulnerabilities affect the following supported versions: 5.6.45 and...

Adobe Acrobat and Reader CVE-2019-8162 Arbitrary Code Execution Vulnerability

Description Adobe Acrobat and Reader are prone to an arbitrary code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of current user running the affected application. Failed exploits will result in denial-of-service conditions...

Oracle GraalVM Enterprise Edition CVE-2019-2986 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocol. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.2.0 Technologies Affected Orac...

Palo Alto Networks GlobalProtect Agent CVE-2019-17435 Local Privilege Escalation Vulnerability

Description Palo Alto Networks GlobalProtect Agent is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to gain elevated privileges on the affected system. Versions prior to Palo Alto Networks GlobalProtect agent 4.1.13 and 5.0.4 for Windows platform are...

Oracle Hospitality Reporting and Analytics Multiple Remote Security Vulnerabilities

Description Oracle Hospitality Reporting and Analytics is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Admin - Configuration' and 'Inventory Integration' packages are affected. These vulnerabilities affect the following...

Oracle BI Publisher Multiple Remote Security Vulnerabilities

Description Oracle BI Publisher is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Mobile Service' and 'BI Publisher Security' components are affected. These vulnerabilities affect the following supported versions: 11.1.1.9....

Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

Description Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities . Successfully exploiting these issues allow attackers to execute arbitrary code in the context of current user running the affected application. Failed exploits will result in denial-of-service...

Oracle Database Server CVE-2019-2940 Local Security Vulnerability

Description Oracle Database Server is prone to a local security vulnerability. The vulnerability can be exploited over the 'OracleNet' protocol. The 'Core RDBMS' component is affected. This vulnerability affects the following supported versions: 12.1.0.2, 12.2.0.1 and 18c Technologies Affected...

Oracle Java SE/Java SE Embedded CVE-2019-2964 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Concurrency' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13;...

Oracle Primavera P6 Enterprise Project Portfolio Management Remote Security Vulnerability

Description Oracle Primavera P6 Enterprise Project Portfolio Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Web Access' component is affected. This vulnerability affects the following supported versions: 15.1.0 through...

Oracle JDeveloper and ADF CVE-2019-2904 Remote Security Vulnerability

Description Oracle JDeveloper and ADF are prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'ADF Faces' package is affected. This vulnerability affects the following supported versions: 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0 Technologies Affect...

Oracle E-Business Suite CVE-2019-2990 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in Oracle iStore. The vulnerability can be exploited over the 'HTTP' protocol. The 'Order Tracker' component is affected. This vulnerability affects the following supported versions: 12.1.1 through 12.1.3 and 12.2.3...

Oracle MySQL Server CVE-2019-2948 Remote Security Vulnerability

Description Oracle MySQL Server is prone to a remote security vulnerability in 'Server: Optimizer' component. The vulnerability can be exploited over the 'MySQL' protocol. This vulnerability affects the following supported versions: 5.7.26 and prior, 8.0.16 and prior Technologies Affected Oracle...

Oracle MICROS Relate CRM Software CVE-2019-2896 Remote Security Vulnerability

Description Oracle MICROS Relate CRM Software is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Internal Operations' component is affected. This vulnerability affects the following supported versions: 7.1.0, 15.0.0, 16.0.0, 17.0.0 and...

Multiple Sonatype Products CVE-2019-16530 Unspecified Remote Code Execution Vulnerability

Description Multiple Sonatype Products are prone to an unspecified remote code execution vulnerability Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. The following Sonatype products are vulnerable Nexus Repository Manager ...

Oracle Java SE/Java SE Embedded CVE-2019-2978 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Networking' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13;...

Oracle MySQL Server Cpuoct2019 Multiple Security Vulnerabilities

Description Oracle MySQL Server is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'MySQL Protocol' protocol. The 'Server: Security: Encryption' and 'Server: Security: Encryption' components are affected. These vulnerabilities affect the following supported...

Oracle Java SE CVE-2019-2977 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Hotspot' component. This vulnerability affects the following supported versions: Java SE: 11.0.4, 13 Technologies Affected Oracle Java SE...

Oracle Database Server CVE-2019-2909 Remote Security Vulnerability

Description Oracle Database Server is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. The 'Java VM' component is affected. This vulnerability affects the following supported versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Technologies...

Oracle Hospitality RES 3700 CVE-2019-3025 Remote Security Vulnerability

Description Oracle Hospitality RES 3700 is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Interface' package is affected. This vulnerability affects the following supported versions: 5.7 Technologies Affected Oracle Hospitality RES 3700...

Oracle WebLogic Server Multiple Remote Security Vulnerabilities

Description Oracle WebLogic Server is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Console', 'Web Services', 'EJB Container', and 'Web Services' components are affected. These vulnerabilities affect the following supporte...

Adobe Acrobat and Reader CVE-2019-8160 Cross Site Scripting Vulnerability

Description Adobe Acrobat and Reader are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication...

Oracle Hospitality Cruise Dining Room Management CVE-2019-2953 Remote Security Vulnerability

Description Oracle Hospitality Cruise Dining Room Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 8.0.80 Technologies Affected Oracle Hospitality Cruise Dining Room...