785 matches found
CVE-2019-17603
Affected software: ASUS Aura Sync (Ene.sys) up to version 1.07.71. Vulnerability: IOCTL handling in Ene.sys does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, enabling local users to cause a denial of service (system crash) or gain privileges via crafted kernel addr...
CVE-2019-17603
Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service system crash or gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption...
aura-condo.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1175514 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
auramecosmetic.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1145254 Security Researcher Sameull Helped patch 271 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting auramecosmetic.com website and its users. Following...
Avaya Aura Communication Manager 5.2 Remote Code Execution
Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory: https://downloads.avaya.com/css/P8/documents/100183151 Exploit generates a reverse shel...
Avaya Aura Communication Manager 5.2 - Remote Code Execution
Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory:...
Avaya Aura Communication Manager 5.2 - Remote Code Execution
Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory: https://downloads.avaya.com/css/P8/documents/100183151 Exploit generates a reverse shel...
Avaya Aura Conferencing Cross-Site Scripting Vulnerability
Avaya Aura Conferencing is a next-generation on-premise collaboration solution from Avaya, Inc. The product is capable of delivering audio, HD video, and Web collaboration.A cross-site scripting vulnerability exists in Avaya Aura Conferencing 8.0 SP14 8.0.14 prior to version 8.x. The vulnerabilit...
CVE-2019-7000
A Cross-Site Scripting XSS vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 8.0.14. Prior versions not listed were not evaluated...
CVE-2019-7000
A Cross-Site Scripting XSS vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 8.0.14. Prior versions not listed were not evaluated...
Cross site scripting
A Cross-Site Scripting XSS vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 8.0.14. Prior versions not listed were not evaluated...
CVE-2019-7000 Avaya Aura Conferencing XSS
A Cross-Site Scripting XSS vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferencing include all 8.x versions prior to 8.0 SP14 8.0.14. Prior versions not listed were not evaluated...
CVE-2019-7000
Avaya Aura Conferencing Web UI is affected by a cross‑site scripting (XSS) vulnerability in 8.x versions prior to 8.0 SP14 (8.0.14). The issue stems from client data handling in the Web UI, enabling potential code execution and disclosure of sensitive information. Affected versions include all 8....
PT-2019-18407 · Avaya · Avaya Aura Conferencing
Name of the Vulnerable Software and Affected Versions: Avaya Aura Conferencing versions prior to 8.0 SP14 8.0.14 Description: A Cross-Site Scripting XSS issue in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Recommendations: For Ava...
CVE-2018-15617
A vulnerability in the "capro" Call Processor process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1...
CVE-2018-15617
A vulnerability in the "capro" Call Processor process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1...
Code injection
A vulnerability in the "capro" Call Processor process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1...
CVE-2018-15617
The CVE-2018-15617 vulnerability affects Avaya Aura Communication Manager’s capro (Call Processor) component and could allow a remote, unauthenticated attacker to cause a denial of service. Affected software includes 6.3.x; all 7.x versions before 7.1.3.2; all 8.x versions before 8.0.1. The avail...
CVE-2018-15617 Communication Manager Denial of Service
A vulnerability in the "capro" Call Processor process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1...