CVE-2018-0789

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2018-00893)

Microsoft SharePoint Foundation and SharePoint Server are both business collaboration platforms from Microsoft. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, and so on. An elevation of privilege vulnerability exists in Microsoft...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Foundation and SharePoint Server are both business collaboration platforms from Microsoft. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, and so on. An elevation of privilege vulnerability exists in Microsoft...

ASP.NET Core Elevation Of Privilege Vulnerability

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests. An attacker who successfully exploited this vulnerability could perform content injection attacks and run script in the security...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager allows a hacker to execute arbitrary operating system commands.

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager exists because measures to neutralize the special elements used in operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands via...

CVE-2017-6133

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service...

Microsoft Exchange Spoofing Vulnerability

Microsoft Exchange Server 2016 is a suite of email service programs from Microsoft USA that provides email access, storage, forwarding, voicemail, email filtering and screening, etc. CU6 and CU7 are 2 of the cumulative updates. A security vulnerability exists in Microsoft Exchange Server 2016 CU6...

Microsoft SharePoint Enterprise Server Elevation of Privilege Vulnerability

Microsoft SharePoint Enterprise Server 2016 is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for...

CVE-2017-11936

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

Privilege escalation

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

CVE-2017-11936

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...

KLA11159 SUI vulnerability in Microsoft Exchange Server

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories ADV170023...

Cohu 3960HD Information Disclosure Vulnerability

The Cohu 3960HD is an IP zoom camera from Cohu USA that is typically used as a traffic camera. The Cohu 3960HD suffers from an information disclosure vulnerability. An attacker can view and download source code, log files, and other sensitive device information via a specially crafted web request...

Microsoft ASP.NET Core Denial of Service Vulnerability

This host is missing an important security update according to Microsoft advisory CVE-2017-11883. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Huawei UMA Product SQL Injection Vulnerability

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal to control and record the O&M operations performed by users, and supports auditing by command view and video playback. A SQL injection vulnerability exists in the Huawei UMA product, as the...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37113)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core versions 1.0, 1.1, and...

Denial of service

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability"...

Foscam IP Video Camera Buffer Overflow Vulnerability (CNVD-2017-34270)

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to overwrite arbitrary data...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...