CVE-2020-11414

An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the...

The vulnerability of the weblogin.cgi component in NAS (Network Attached Storage) storage systems and micro-programming software for Ethernet interfaces of UTM, ATP, and VPN devices allows a hacker to execute arbitrary code.

The vulnerability of the weblogin.cgi component in NAS Network Attached Storage storage systems and microprogramming software for Ethernet interfaces of UTM, ATP, and VPN devices is related to errors during the verification of the username parameter. Exploiting this vulnerability allows a malicio...

CVE-2020-0903

A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'...

CVE-2020-0894

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893...

Mozilla Firefox Process Out-of-Bounds Write Vulnerability

Mozilla Firefox is a popular WEB browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers to submit a special web request that can be parsed by the user, causing the application to crash or execute arbitrary code...

CVE-2019-3995

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request...

Squid buffer overflow vulnerability (CNVD-2019-42424)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A buffer overflow vulnerability exists in Squid versions 3.x through 3.5.28 and 4.x through 4.8, which can be exploite...

The vulnerability of the executable file BwOpcBs.exe of the Advantech WebAccess monitoring software allows a intruder to execute arbitrary code.

The vulnerability of the BwOpcBs.exe executable of the Advantech WebAccess monitoring software is related to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

The vulnerability of the RouterOS operating system in MikroTik routers, related to the emergency termination of the HTTP server, allows a hacker to restart the system and cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik relates to the abnormal termination of the HTTP server. Exploiting this vulnerability allows a malicious actor to remotely restart the system and cause a service failure by sending a specially crafted HTTP request...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router and so on are a VPN virtual private network router from Cisco. An arbitrary command execution vulnerability exists in the Web management interface of several Cisco products, which stems from the program's failure to validate the input of HTTP payloads, and can be...

CVE-2019-15966

A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could...

CVE-2019-16279

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

CVE-2019-1329

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...

CVE-2019-1070

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

Epignosis eFront LMS Code Issue Vulnerability

Epignosis eFront LMS is a suite of online e-learning platforms from Epignosis, Inc. in the United States. The platform provides test building, assignment management, internal messaging, forums and online chat. A code issue vulnerability exists in Epignosis eFront LMS version 5.2.12, which can be...

The vulnerability in the web interface for managing physical infrastructure and virtual environments of Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to bypass authentication procedures and execute arbitrary code.

The vulnerability in the web-based interfaces for managing physical infrastructure and virtual environments of Cisco UCS Director and Cisco UCS Director Express for Big Data is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass...

Cisco UCS C-Series Servers and UCS S-Series Servers Integrated Management Controller Denial of Service Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A...

CVE-2019-1907

A vulnerability in the web server of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comparison operations that are performed by...

Cisco Integrated Management Controller Numeric Error Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A numeric...

CVE-2019-0963

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...