19893 matches found
CVE-2019-3945
CVE-2019-3945 affects Parrot ANAFI. Multiple connected sources describe a vulnerability in the drone’s web server where sending the SDK command Common_CurrentDateTime with a date longer than expected crashes the control service. The issue is documented across CVE entries and supplier references, ...
Dreamcms v1.4 (lmxcms) file upload vulnerability in the background
Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name, completely free and open source. Dream cms v1.4 lmxcms file upload vulnerability in the background, attackers can use the vulnerability to obtain web server...
PT-2020-10924 · Parrot · Parrot Anafi
Name of the Vulnerable Software and Affected Versions: Parrot ANAFI affected versions not specified Description: The web server running on Parrot ANAFI can be crashed due to the SDK command Common CurrentDateTime being sent to the control service with a larger than expected date length...
DEBIAN-CVE-2020-10696
A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTPs server and then write files to the user's system anywhere that the user has permissions...
httpd: mod_session_cookie does not respect expiry time
In Apache HTTP Server 2.4 release 2.4.37 and prior, modsession checks the session expiry time before decoding the session. This causes session expiry time to be ignored for modsessioncookie sessions since the expiry time is loaded when the session is decoded...
Moderate: Red Hat Security Advisory: python-twisted-web security update
An update for python-twisted-web is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
JQuery < 1.9.0 XSS
According to the self-reported version in the script, the version of JQuery hosted on the remote web server is prior to 1.9.0. It is, therefore, affected by a cross site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid135011; scriptversion"1.3...
File upload vulnerability exists in OurPHP (CNVD-2020-24709)
OurPHP is an enterprise e-commerce website builder. A file upload vulnerability exists in OurPHP, which can be exploited by attackers to gain control of a web server...
CVE-2020-10374
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...
CODESYS Web Server Buffer Overflow (CVE-2020-10245)
A buffer overflow vulnerability exists in CODESYS web server. Successful exploitation of this vulnerability could result in a denial of service condition...
Debian: Security Advisory (DLA-2162-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
File Upload Vulnerability in Scarecrow Enterprise Website
The Inari Enterprise Station is an open source simple and compact free enterprise website system based on PHP+Sqlite/MySQL. Scarecrow Enterprise Station has a file upload vulnerability that can be exploited by attackers to gain access to the web server...
File upload vulnerability in freeCMS v1.5 (CNVD-2020-24733)
FreeCMS is an open source free CMS. FreeCMS v1.5 has a file upload vulnerability that can be exploited by an attacker to upload arbitrary files and gain control of the web server...
SonicWall SMA1000 HTTP Extraweb Denial of Service Vulnerability
The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A security vulnerability exists in the HTTP Extraweb server in SonicWall SMA1000 12.1.0-06411 and prior versions. A remote attacker could exploit this vulnerability to cause the HTTP server to crash, resulting in a deni...
File Upload Vulnerability in Swordfish Forum v1.5.0
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. Swordfish Forum v1.5.0 has a file upload vulnerability that can be exploited by attackers to gain control of the web server...
Critical CODESYS Bug Allows Remote Code Execution
A critical flaw in a web server for the CODESYS automation software for engineering control systems could allow a remote, unauthenticated attacker to crash a server or execute code. The bug is rated 10 out of 10 on the CVSS v.2 vulnerability severity scale and requires little skill to exploit, th...
undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange...
CVE-2020-5129
A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-06411 and earlier...