The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to integer overflow. This allows a intruder to trigger a service failure.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially crafted HTTP request...

Missing permission check in Team Foundation Server allows enumerating credentials IDs

Team Foundation Server 5.157.1 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another...

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software lies in the fact that the output operation goes beyond the buffer in memory, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a speciall...

The vulnerability of Squid’s request headers, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of Squid proxy server requests is related to a lack of proper interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of Google Chrome’s HTTP protocol implementation lies in the improper implementation of security checks for standard elements, allowing attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Google Chrome’s HTTP protocol implementation is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. Cisco SD-WAN vManage Software suffers from an input validation error vulnerability that stems from insufficient validation of HTTP requests. An attacker could exploit the...

The vulnerability of the Apache Tomcat application server, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apache Tomcat application server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

CVE-2021-26565

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session...

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

The vulnerability of the Tasks component in Oracle Common Applications Calendar allows attackers to modify data or gain unauthorized access to the device, due to insufficient validation of input data.

The vulnerability of the Tasks component in the Oracle Common Applications Calendar application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to modify data or gain unauthorized access to the device through HTTP requests...

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W routers allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based management interfaces for Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN routers is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the components of Web Services in Oracle WebLogic Server applications allows attackers to gain unauthorized access to protected information.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Report component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Report component of the Oracle Hospitality Reporting and Analytics application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected...

The vulnerability of the Integration-Scripting component of the Siebel Core application – the Server BizLogic Script – allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Integration-Scripting component of the Siebel Core application – Server BizLogic Script – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using th...

The vulnerability of the components of Oracle WebLogic Server’s application service servers allows a perpetrator to gain full control over the application.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application through the use of the HTTP protocol...

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to inconsistent interpretation of http requests. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the UI Servlet component of the Oracle Configurator allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the UI Servlet component of the Oracle Configurator exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete data using...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in its lack of access control mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add,...

The vulnerability of the Adobe Experience Manager content and media data management system, caused by server-side manipulation of requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Experience Manager content and media data management system is caused by server-side manipulation of requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protoc...