Newphoria Photon Application Authentication Bypass Vulnerability

Newphoria Photon for Android is a suite of lighting applications based on the Android platform from the Japanese company Newphoria. A security restriction bypass vulnerability exists in the Newphoria Photon application. It allows attackers to bypass URL whitelisting protection mechanisms and gain...

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

foreman-proxy: failure to verify SSL certificates

It was discovered that foreman-proxy, when running in SSL-secured mode, did not correctly verify SSL client certificates. This could permit any client with access to the API to make requests and perform actions otherwise restricted...

MS-DOS: Arbitrary command execution in MS-DOS

Versions 1.1 and 2.0 of MS-DOS allow a malicious actor to execute arbitrary system commands via the main application interface. Prerequisites: MS-DOS 1.1 or MS-DOS 2.0 installation Input device e.g. keyboard Steps to reproduce: Enter the command mode Type VER to make sure that the system is on of...

Buffer overflow

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

CVE-2013-5532

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

CVE-2013-5532

The CVE-2013-5532 case affects Cisco 9900 Series IP phones. The issue is a buffer overflow in the web-application interface caused by insufficient validation of certain input fields, allowing remote attackers to trigger a denial of service (webapp interface outage). Reported by Cisco and Red Hat ...

CVE-2013-5532: Improper Input Validation

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

CVE-2010-3684

CVE-2010-3684 concerns the FTP authentication module in Synology Disk Station 2.x, where passwords are logged to the web interface during incorrect login attempts. This behavior allows local users to read sensitive credentials from the log, and is noted as a different issue from CVE-2010-2453. Co...

CVE-2010-3684

The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453...