147 matches found
Easy File Sharing FTP Server Directory Traversal Vulnerability
EFS Software Easy File Sharing FTP Server is an easy-to-use and powerful FTP Server software from EFS Software, Netherlands. A directory traversal vulnerability exists in Easy File Sharing FTP Server, which stems from a failure to adequately validate user input. A remote attacker could utilize a...
CVE-2016-8328
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
CVE-2016-3188
The prepopulaterequestwalk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the 1 actions, 2 container, 3 token, 4 password, 5 passwordconfirm, 6 textformat, or 7 markup field type, and consequently have unspecified impact, via unspecified...
Design/Logic Flaw
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...
The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to modify files of any type.
The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to modify files of any type remotely...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications Manager Oracle Diagnostics Interfaces Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Applications Manager Oracle Diagnostics Interfaces component, which could be exploited by remote attackers to submit a special request to...
The vulnerability of the Enterprise Manager Grid Control software allows a hacker to modify data.
The vulnerability of the Enterprise Manager Ops Center component of the Enterprise Manager Grid Control system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to remotely modify data...
The vulnerability of the MySQL database management system allows a hacker to modify data.
The vulnerability of the Server sub-component in the Security section relates to errors in the code of the MySQL database management system. Exploiting this vulnerability allows a malicious actor to remotely modify data...
DEBIAN-CVE-2014-8242
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack...
Vulnerability in Oracle Fusion Middleware WebCenter Content Component
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...
wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property
It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...
SAP EMR Unwired and Clinical Task Tracker Access Restriction Bypass Vulnerabilities
SAP EMR Unwired is a mobile app that enables physicians and nurses to instantly access patient data when they need it.SAP Clinical Task Tracker is an easy and secure way to access clinical tasks assigned to your patients anytime, anywhere. SAP EMR Unwired and Clinical Task Tracker fail to properl...
CVE-2014-8493
ZTE ZXHN H108L with firmware 4.0.0dZRQGR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/accesscwmp1...
CVE-2014-4003
The System Landscape Directory SLD in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system...
CVE-2014-4003
The System Landscape Directory SLD in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system...
PT-2014-4320 · Debian +2 · Devscripts +2
Name of the Vulnerable Software and Affected Versions: devscripts version 2.14.1 Description: A directory traversal issue in uupdate in devscripts allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink. Recommendations: For devscripts version 2.14.1,...
JNDI: unauthenticated remote write access is permitted by default
The 1 JNDI service, 2 HA-JNDI service, and 3 HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly...
CVE-2011-4044
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods...
The Killswitch : They can remotely modify your Window 8
The Killswitch : They can remotely modify your Window 8 Last year,a Finnish software developer, was cruising Google's Android Market for smartphone apps last year when he noticed something strange. Dozens of best-selling applications suddenly listed the same wrong publisher. Google uses a little...
