The vulnerability of the Security component of the MICROS Lucas software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Security component of the MICROS Lucas software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information through HTTP requests...

The vulnerability of the Back Office component of the MICROS Retail-J software allows a hacker to disclose protected information.

The vulnerability of the Back Office component of the MICROS Retail-J software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information through HTTP requests...

Security Update for .NET Core SDK (Sep 2019)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.509, or 2.1.606 or 2.1.802, 2.2.x 2.2.109 or 2.2.206 or 2.2.302. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability when .Net Core improperly handles web requests. An...

The vulnerability of the RouterOS operating system in MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted HTTP requests...

dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

Denial Of Service (DoS)

dotnet is vulnerable to denial of service. An improper handling of web requests allows a remote attacker to crash the application...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-31853)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

CVE-2019-1302

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...

CVE-2019-1301

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

Denial of service

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

Spoofing

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'...

CVE-2019-1301

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

.NET Core SDK Multiple Vulnerabilities (Sep 2019)

ASP.NET Core SDK is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:.netcoresdk";...

Security Updates for Microsoft Visual Studio Products (September 2019)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations. An attacker who...

Microsoft Exchange Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...

Microsoft SharePoint Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery CSRF. To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request. The...

ALPINE-CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

Cisco UCS Director and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

Cisco UCS Director and Cisco UCS Director Express for Big Data are both products from Cisco, Inc. Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS. Cisco UCS Director is a heterogeneous platform for private cloud infrastructure-as-a-service IaaS. A...

CVE-2019-1900

A vulnerability in the web server of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service DoS condition on an affected system. The vulnerability is due to insufficient validation of...