7036 matches found
Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is included in HTTP...
Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is...
Cisco Finesse Open Redirect Vulnerability
Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. An open redirection vulnerability exists in the Web management interface of Cisco Finesse 12.61 and...
Enterprise Manager FMW Control Plugin DoS
The vulnerability of the FMW Control Plugin sub-component of the Enterprise Manager for Fusion Middleware software from Oracle exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures through HTTP requests...
PT-2021-3073
Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...
Core server component Oracle WebLogic Server Data Modification DoS
The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data through HTTP requests...
Oracle E-Business Suite Change Management Unauthorized Access
The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...
CVE-2021-32455
SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...
CVE-2021-32455
CVE-2021-32455 affects SITEL CAP/PRX firmware version 5.2.01. Affected component: firmware running on SITEL CAP/PRX devices. Root cause described as a resource/handling issue that allows an attacker with access to the device network to trigger a denial-of-service condition by sending HTTP request...
CVE-2021-32455 SITEL CAP/PRX vulnerable to a denial of service attack
SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...
CVE-2021-32455: Uncontrolled Resource Consumption
SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...
PT-2021-19707
Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the device's network to cause a denial of service condition on the device. An attacker could exploit this by sending HTTP requests massively...
Unspecified Vulnerability in JetBrains WebStorm
JetBrains WebStorm is an application from the Czech company JetBrains. Provides an IDE for programming. A security vulnerability exists in JetBrains WebStorm versions prior to 2021.1. The vulnerability stems from the program's use of HTTP requests instead of HTTPS.No detailed vulnerability detail...
RHEL 8 : Red Hat OpenShift Service Mesh 1.1.14 (RHSA-2021:1540)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1540 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
Oracle E-Business Suite India Localization Sub-component Results Component Unauthorized Access
The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...
Oracle Legal Entity Configurator Create Contracts Unauthorized Access
The vulnerability of the Create Contracts sub-component of the Oracle Legal Entity Configurator, a component of the Oracle E-Business Suite, is related to code errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...
istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms
An authorization bypass flaw was found in Istio. This flaw allows an attacker to craft an HTTP request that defines a certain pattern of escaped characters in the URI path such as %2F, %2f, %5C, or %5c, allowing them to bypass the authorization service. The highest threat from this vulnerability ...
CVE-2021-31898
In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS...
