PT-2019-3631

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 15.1.0 through 15.2.18 Primavera P6 Enterprise Project Portfolio Management versions 16.1.0 through 16.2.18 Primavera P6 Enterprise Project Portfolio Management versions 17.1.0...

D-Link DIR devices Authentication Bypass Vulnerability

Multiple D-Link DIR devices are prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advantech WebAccess HMI Designer Denial of Service Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. A denial of service vulnerability exists in Advantech WebAccess HMI Designer 2.1.9.31. The vulnerability originates from data control from a faulty address in a code stream starting at...

D-Link DIR-868L REVB, DIR-885L REVA and DIR-895L REVA Authentication Bypass Vulnerability

The D-Link DIR-868L REVB, among others, is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in SharePort Web Access in D-Link DIR-868L REVB version 2.03 and earlier, DIR-885L REVA version 1.20 and earlier, and DIR-895L REVA version 1.21 and earlier. An attacker...

CVE-2019-16190

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folderview.php or categoryview.php...

CVE-2019-16190

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folderview.php or categoryview.php...

Authentication flaw

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folderview.php or categoryview.php...

CVE-2019-16190

CVE-2019-16190 affects D-Link SharePort Web Access on DIR-868L REVB (firmware up to 2.03), DIR-885L REVA (up to 1.20), and DIR-895L REVA (up to 1.21). The vulnerability enables an Authentication Bypass demonstrated by direct requests to folder_view.php or category_view.php. Public details in conn...

CVE-2019-16190

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folderview.php or categoryview.php...

CVE-2019-16190: Improper Authentication

SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folderview.php or categoryview.php...

PT-2019-4342

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L REVB versions 2.03 and earlier D-Link DIR-885L REVA versions 1.20 and earlier D-Link DIR-895L REVA versions 1.21 and earlier Description The issue is related to the SharePort Web Access function in the firmware of D-Link router...

Microsoft Outlook Web Access 14.3.224.2 Header Injection

!/usr/bin/perl -w Microsoft Outlook Web Access build:14.3.224.2 Remote Header 'Host' Injection Copyright 2019 c Todor Donev I suspect "Web Cache Poison" but I'm not sure, so test ; Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual...

Microsoft Outlook Web Access Build 15.1.1591 Header Injection Exploit

Exploit for windows platform in category web applications !/usr/bin/perl -w Microsoft Outlook Web Access build:15.1.1591 Remote Header 'Host' Injection Exploit Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. Th...

Microsoft Live Accounts Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Outlook Web Access OWA regarding a possible unsigned token. An attacker who successfully exploited this vulnerability could have access to another person's email inbox. To exploit this vulnerability, an attacker would first have to replace an...

Microsoft Live Accounts ADV190014 Privilege Escalation Vulnerability

Description Microsoft Live Accounts are prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Online Microsoft Office 365 Microsoft Outlook Web Access Recommendations Block external access at the...

CVE-2019-2861

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion subcomponent: Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful...

CVE-2019-2858

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware subcomponent: Advanced Console. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2019-2840

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2019-2843

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...