CVE-2020-10948

Jon Hedley AlienForm2 typically installed as af.cgi or alienform.cgi 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests...

Design/Logic Flaw

Jon Hedley AlienForm2 typically installed as af.cgi or alienform.cgi 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests...

CVE-2020-10948

Jon Hedley AlienForm2 typically installed as af.cgi or alienform.cgi 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests...

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

The vulnerability of the TempFileName parameter of the CGI script cgiRecvFile.exe in the Worry-Free Business Security antivirus protection system allows a hacker to read arbitrary files in the target system.

The vulnerability of the TempFileName parameter in the CGI executable cgiRecvFile.exe exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files on the target system by sending specially crafted HTTP requests...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-33794)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system with the help of a specially crafted...

Samsung Competitive Conditions for Mobile Devices Issue Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a Competitive Conditions Issue vulnerability that can be exploited by attackers to cause a denial of service with the help of specially crafted...

The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created reque...

Cross site request forgery (csrf)

CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request...

The vulnerability of the microprogramming software in wireless access points for Moxa AWK-3131A industrial systems, related to hostname processing errors, allows attackers to escalate their privileges.

The vulnerability of the microprogrammed software in the wireless access point of Moxa AWK-3131A industrial systems is related to name handling errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges by sending specially crafted SNMP requests...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-18392)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

The vulnerability in the graph_realtime.php file of the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability in the graphrealtime.php file of the Cacti network monitoring software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

The vulnerability of the Office Online Server web server, related to insufficient validation of input data, allows attackers to carry out spoofing attacks.

The vulnerability of the Office Online Server web server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using specially crafted requests...

envoy: Excessive CPU and/or memory usage when proxying HTTP/1.1

A resource consumption vulnerability was found in the servicemesh-proxy in Envoy. An attacker could send specially crafted small HTTP/1.1 packets that, when processed, could cause excessive amounts of memory to be used, possibly degrading or crashing the application...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a hacker to re-write files in the basic file system.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...

CVE-2019-4672

IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438...

CVE-2020-1827

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending...

The vulnerability of the OpsConsole Server component of the Cisco Unified Customer Voice Portal, a self-service and voice portal system, allows a malicious actor to trigger a service failure.

The vulnerability of the OpsConsole Server component of the Cisco Unified Customer Voice Portal distributed self-service system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted HTT...

Multiple Siemens Products Resource Consumption Vulnerability

Siemens SIMATIC S7-300 CPUs etc. are products of Siemens, Germany.SIMATIC S7-300 CPUs is a CPU Central Processing Unit module.Siemens SIMATIC S7-1200 is a PLC Programmable Logic Controller of the S7-1200 series. Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and proce...