CVE-2023-3527 Avaya Call Management System CSV injection vulnerability

A CSV injection vulnerability was found in the Avaya Call Management System CMS Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a...

CVE-2023-3527 Avaya Call Management System CSV injection vulnerability

A CSV injection vulnerability was found in the Avaya Call Management System CMS Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a...

CVE-2023-22506: Improper Control of Generation of Code

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...

EulerOS 2.0 SP10 : avahi (EulerOS-SA-2023-2346)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...

CVE-2023-3527: Improper Neutralization of Formula Elements in a CSV File

A CSV injection vulnerability was found in the Avaya Call Management System CMS Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a...

Avaya Call Management System security vulnerabilities

Avaya Call Management System is an integrated analytics and reporting solution from Avaya, Inc. that keeps you informed about virtually everything. A security vulnerability exists in Avaya Call Management System that originates from the presence of a CSV injection vulnerability that could allow a...

EulerOS 2.0 SP10 : avahi (EulerOS-SA-2023-2372)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...

PT-2023-25199

Name of the Vulnerable Software and Affected Versions Avaya Call Management System CMS Supervisor affected versions not specified Description A CSV injection issue was found in the Avaya Call Management System CMS Supervisor web application, allowing a user with administrative privileges to input...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows Code Execution

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows Unauthorized Access

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems relates to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...