CVE-2017-17562

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...

Cross-Site Scripting (XSS)

djangofilebrowser is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability exists as the request parameters are marked safe instead of being safely encoded...

Cross-Site Scripting in PAN-OS

A vulnerability exists in the PAN-OS GlobalProtect external interface that could allow for a cross-site scripting XSS attack. PAN-OS does not properly validate specific request parameters. Ref PAN-77294 / CVE-2017-9467 Successful exploitation of this issue may allow an attacker to inject arbitrar...

ntopng cross-site scripting vulnerability (CNVD-2017-16033)

NTOPNG is the next generation version of NTOP, computer software for monitoring traffic on a computer network. A cross-site scripting vulnerability exists in ntopng. The vulnerability stems from improper validation of GET and POST parameters and can be exploited by an attacker to inject arbitrary...

Trend Micro InterScan Web Security Virtual Appliance VerboseLog Directory Traversal

A directory traversal vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance IWSVA. The vulnerability is due to improper validation of the HTTP request parameters when processing requests to the VerboseLog servlet. A remote, authenticated attacker can exploit this...

HPE Network Automation RedirectServlet SQL Injection (CVE-2017-5810)

A SQL injection vulnerability exists in HPE Network Automation. The vulnerability is due to insufficient sanitization of certain HTTP request parameters in RedirectServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...

CVE-2017-7216

The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters...

CVE-2017-7409

Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, aka PAN-SA-2017-0011 and PAN-70674...

CVE-2017-7218

The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters...

CVE-2017-5672

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

Local Privilege Escalation in the Management Web Interface

A vulnerability exists in the Management Web Interface that could allow for local privilege escalation. The Management Web Interface does not properly validate specific request parameters which can potentially allow executing code with higher privileges. Ref PAN-70426/ CVE-2017-7218 Successfully...

Local Privilege Escalation in the Management Web Interface

A vulnerability exists in the Management Web Interface that could allow for local privilege escalation. The Management Web Interface does not properly validate specific request parameters which can potentially allow executing code with higher privileges. Ref PAN-70426/ CVE-2017-7218 Successfully...

Sophos Web Appliance < 4.3.1.2 Multiple Vulnerabilities

According to its self-reported build number, the Sophos Web Appliance running on the remote host is prior to 4.3.1.2. It is, therefore, affected by following vulnerabilities : - A remote command injection vulnerability exists due to a failure in certain functions to properly sanitize input upon...

McAfee VirusScan Enterprise Arbitrary Code Execution Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. An arbitrary code execution vulnerability exists in VirusScan...

CVE-2016-2881

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request parameters...

IBM QRadar SIEM and Incident Forensics Security Bypass Vulnerability

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM USA. The software supports in-depth forensic investigations of suspected malicious cybersecurity incidents and the remediation of cybersecurity vulnerabilities.IBM QRadar SIEM is an IBM solution...

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

IBM Lotus Domino Web Server iNotes Buffer Overflow (CVE-2003-0178)

A buffer overflow vulnerability exists in IBM Lotus Domino iNotes Web Server. The vulnerability is due to incorrect handling of client-supplied request parameters. A remote attacker can exploit this vulnerability by sending crafted requests to affected servers...

Open redirect

Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server MCS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136...

CVE-2015-4297

Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server MCS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136...