sonicwall netextender initializing engine failed

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.4 has a SetCameraConnectionParameter stack-based buffer overflow. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service. The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability.

The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands.ĭue to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. This allows an attacker to exploit a Stored Cross-Site Scripting (XSS) vulnerability when a user browses through the employee directory and to execute arbitrary code on the victim's browser. Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. Exploitation of this issue requires user interaction in that a victim must open a maliciously crafted Microsoft Office file, or visit an attacker controlled web page. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.Īcrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability.

Sonicwall netextender initializing engine failed