3967 matches found
Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability
Microsoft Windows 7 is an operating system released by Microsoft.Windows Server 2008 is a server operating system released by Microsoft.Microsoft Windows XP is a popular Windows operating system.Microsoft Windows Server 2003 R2 is a set of server operating systems released by Microsoft Corporatio...
Facebook WhatsApp Buffer Overflow Vulnerability
Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. Facebook WhatsApp suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability to submit a special request that can be us...
CVE-2019-1867 Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability
A vulnerability in the REST API of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted...
CVE-2018-20580
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
CVE-2018-20580
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
CVE-2019-10952
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370...
The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to gain access to protected information.
The vulnerability of the Cisco IOS XE operating system’s web interface is related to configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using a specially crafted request...
HooToo HT-05 Remote Code Execution
A remote code execution vulnerability exists in HooToo HT-05 travel router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 allows a perpetrator to cause a service failure.
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 is related to deficiencies in the validation of data entered by users. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted request...
DEBIAN-CVE-2019-11072
lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c. NOTE:...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
Improper access control
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2019-0798
A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'...
Design/Logic Flaw
IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774...
CVE-2015-5606
Vordel XML Gateway acquired by Axway version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request...
CVE-2015-5606
Vordel XML Gateway acquired by Axway version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request...
CVE-2018-1640
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force I...