Archive
10 January 2019
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Medium 6.1
Cisco Webex Business Suite Cross-Site Scripting Vulnerability
A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker coul…
-
High 8.6
Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (Do…
-
Unscored —
Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.
-
Unscored —
Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the att…
-
Unscored —
Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user…
-
Unscored —
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the …
-
Critical 9.8
modulemd uses an unsafe function for processing externally provided data
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
-
Medium 6.1
Bodhi Cross-site Scripting Vulnerability
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
-
Unscored —
Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may…
-
Unscored —
Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privile…
-
Unscored —
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90…
-
Unscored —
Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a pri…
-
Unscored —
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may al…
-
Unscored —
Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potent…
-
Unscored —
Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated us…
-
Medium 6.1
Cisco Prime Infrastructure Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The …
-
Medium 5.3
Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability
A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of servic…
-
Medium 5.3
Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability
A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class co…
-
Unscored —
In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.
-
Medium 4.3
Cisco Identity Services Engine Password Recovery Vulnerability
A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view saved passwords in plain text. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration …
-
High 8.6
Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability
A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacke…
-
Medium 5.4
Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. The vul…
-
Medium 4.6
Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied inpu…
-
Unscored —
Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
-
Unscored —
bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x be…
-
Medium 4.3
Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in con…
-
Medium 5.1
Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability
A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerab…
-
Medium 6.5
Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability
A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on an affected device. The vulnerability exists because the software running on an affected device insuf…
-
High 7.1
An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to imp…
-
High 7.1
The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. …
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to …
-
High 7.1
An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inpu…
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to …
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to …
-
High 7.1
The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input …
-
High 7.1
The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. …
-
High 7.1
The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. …
-
High 7.1
The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input …
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to …
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to …