137 matches found
Cisco UCS Director RestAPI Remote Code Execution (CVE-2020-3247)
A remote code execution vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input within ApplianceFileUploadEntryFormPage class' CopyFileRunnable run method. A remote authenticated attacker can exploit the vulnerability by sending malicious...
CVE-2020-3384 Cisco Data Center Network Manager Command Injection Vulnerability
A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...
PYSEC-2020-87
plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level...
CVE-2020-7938
plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level...
PYSEC-2020-87
plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level...
CVE-2020-7938
Plone 5.2.0–5.2.1 with plone.restapi contains a privilege-escalation flaw that lets users with a certain privilege level elevate to the highest level. The issue, tracked as CVE-2020-7938, affects the REST API component and can impact confidentiality, integrity, and availability. The connected sou...
Red Hat oVirt Privilege Acquisition Vulnerability
Red Hat Ovirt is the United States Red Hat Red Hat company's set of open source virtualization management platform , is the RHEV enterprise virtualization platform of the open source version , by ovirt-node client and overt-engine management side . A security vulnerability exists in Red Hat oVirt...
Buffer overflow
Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10014
CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...
CVE-2017-10014: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10353: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2014-7851
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user...
CVE-2014-7851: Undefined Security Weakness
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user...
Oracle Hospitality Hotel Mobile Unauthorized Modification Vulnerability (CNVD-2017-28231)
Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...
CVE-2017-10133: Undefined Security Weakness
Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RestAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel...
CVE-2017-5487
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...
