2758 matches found
Microsoft ASP.NET Core Denial of Service Vulnerability
This host is missing an important security update according to Microsoft advisory CVE-2017-11883. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Huawei UMA Product SQL Injection Vulnerability
Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal to control and record the O&M operations performed by users, and supports auditing by command view and video playback. A SQL injection vulnerability exists in the Huawei UMA product, as the...
Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37113)
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core versions 1.0, 1.1, and...
Denial of service
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability"...
Foscam IP Video Camera Buffer Overflow Vulnerability (CNVD-2017-34270)
Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to overwrite arbitrary data...
ASP.NET Core Denial of Service Vulnerability
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...
Circle with Disney Command Injection Vulnerability
Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the notification feature in Circle with Disney version 2.0.1. The vulnerability can be...
Circle with Disney Command Injection Vulnerability (CNVD-2017-32880)
Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/restore function in Circle with Disney version 2.0.1. The vulnerability can ...
The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers allows a hacker to elevate administrator privileges and gain full control over the device.
The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers is related to insufficient protection against HTTP requests. Exploiting this vulnerability allows a malicious actor, operating remotely as a Lobby Administrator, to elevate administrative privileges and gain...
CVE-2017-11775
Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting XSS vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka...
Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability
Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016 are both enterprise business collaboration platforms from Microsoft Corporation USA. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, organizing...
Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-30538)
Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A cross-site scripting vulnerability exists in the implementation of Microsoft SharePoint Server when it does not properly filter incoming web requests, which can be exploited by an attack...
PT-2017-12235
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker can exploit this by sending a crafted request...
PT-2017-12259
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting attacks,...
Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-32492)
Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States of America Cisco Cisco company's set of audio and video conferencing server software.Web Admin Interface is one of the Web login interface. A denial of service vulnerability exists in the Web Admin Interfac...
Digium Asterisk GUI OS Command Injection Vulnerability
The Asterisk GUI is a framework for configuring graphical user interfaces. An OS command injection vulnerability exists in Digium Asterisk GUI, which could allow an attacker to execute arbitrary code on a system by injecting OS commands into the program's URL requests...
CVE-2017-6330
Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...
Code injection
Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...
