The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to modify protected data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete protected data...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

The vulnerability of the administrative web interface of the Cisco Identity Services Engine allows a perpetrator to increase their privileges.

The vulnerability of the administrative web interface of the Cisco Identity Services Engine relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through specially crafted HTTP requests...

The vulnerability of the `oup_body_input_stream_read_chunked` function in the `libsoup` library of the GNOME graphical interface for Linux operating systems allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the oupbodyinputstreamreadchunked function in the libsoup/libsoup-body-input-stream.c file, a library for GNOME’s graphical interface in Linux operating systems, arises due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute...

Skype for Business and Lync Spoofing Vulnerability

A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

A vulnerability exists in the backup function of the Cisco Prime Infrastructure network monitoring and management system, which allows a intruder to disclose protected information.

The vulnerability in the backup function of the Cisco Prime Infrastructure monitoring and network equipment management system relates to the transmission of confidential information in GET requests. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

NEC Aterm W300P Buffer Overflow Vulnerability (CNVD-2019-01105)

The NEC Aterm W300P is a wireless router from Nippon Electric NEC. A buffer overflow vulnerability exists in the NEC Aterm W300P using firmware version 1.0.13 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with the help of HTTP requests and responses...

ASP.NET Core Denial of Service Vulnerability (January 2019)

A denial of service DoS vulnerability exists in ASP.NET Core Hosting Bundle module AspNetCoreModule ANCM due to improper handling of web requests. An unauthenticated, remote attacker can exploit this issue, via specially crafted requests, to cause the hosted application to stop responding.. C...

Microsoft Office SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-16199 )

Microsoft Office is an office software suite developed by Microsoft Corporation.Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform. A cross-site scripting vulnerability exists in Microsoft Office SharePoint, which arises from a failure of the program to proper...

Denial of service

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548...

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564...

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564...

CVE-2019-0548

CVE-2019-0548 describes a denial-of-service in ASP.NET Core due to improper handling of web requests. The issue affects ASP.NET Core 2.1.x (before 2.1.7) and 2.2.x (before 2.2.1), involving the ASP.NET Core Hosting Bundle/ANCM (AspNetCoreModule). Root cause per Red Hat advisory is WebSocket/ANCM-...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Logitech Harmony Hub Command Injection Vulnerability

Logitech Harmony Hub is a remote control device from Logitech USA. A command injection vulnerability exists in Logitech Harmony Hub versions prior to 4.15.206, which can be exploited by a remote attacker to execute application-defined commands e.g., harmony.system?systeminfo by sending a speciall...