Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2020-10478)

Microsoft Exchange Server is a suite of e-mail service programs. Microsoft Exchange Server has a security vulnerability that can be exploited by a remote attacker to submit a special request that can gain the same privileges as any other user of Exchange Server...

Microsoft Windows Imaging Library Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A memory corruption security vulnerability exists in the Microsoft Windows Imaging Library, which can be exploited by remote attackers to submit a special request that can elevate privileges...

PostgreSQL Database Password Change Stack Buffer Overflow (CVE-2019-10164)

A stack buffer overflow exists in PostgreSQL Database. The vulnerability is due to a stack buffer overflow when setting a password. A remote, authenticated attacker could send a crafted request in order to trigger the vulnerability. Successful exploitation will result in arbitrary code execution...

CVE-2020-0693

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694...

CVE-2013-1360

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

Authentication flaw

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

Brocade Fabric OS Sensitive Information Disclosure Vulnerability

Brocade Fabric OS is a set of embedded operating systems used in devices such as switches and routers. Brocade Fabric OS has a security vulnerability that can be exploited by a remote attacker to submit a special request that can be used to obtain sensitive information between a switch and a serv...

Unspecified vulnerability in MISP (CNVD-2020-16094)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in versions of MISP prior to 2.4.121, which can be exploit...

Squid buffer overflow vulnerability (CNVD-2020-04520)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow and...

Kronos WebTA "com.threeis.webta.H491delegate" servlet elevation of privilege vulnerability (CNVD-2020-14347)

Kronos WebTA is an attendance system. A security vulnerability exists in the Kronos WebTA "com.threeis.webta.H491delegate" servlet, which can be exploited by a remote attacker to submit a special request that can elevate privileges...

CODESYS Control Remote Denial of Service Vulnerability

CoDeSys is a powerful PLC software programming tool. CODESYS Control memory allocation is vulnerable and can be exploited by a remote attacker to submit a special request, which can be used in a denial of service attack...

Cisco Small Business Switches web UI Denial of Service Vulnerability

Cisco Small Business Switches is a Cisco enterprise switch device. An input validation vulnerability in the Cisco Small Business Switches WEB UI allows remote attackers to exploit the vulnerability to submit a special request, which can be used in a denial of service attack...

The vulnerability of the web interface of the Mongo-express database management system for MongoDB allows a hacker to execute arbitrary code on the target system by sending a specially crafted request.

The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...

[ASA-202002-1] python-django: sql injection

Arch Linux Security Advisory ASA-202002-1 ========================================= Severity: Medium Date : 2020-02-03 CVE-ID : CVE-2020-7471 Package : python-django Type : sql injection Remote : Yes Link : https://security.archlinux.org/AVG-1091 Summary ======= The package python-django before...

CVE-2019-4720

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125...

Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

Microsoft Windows Remote Desktop Gateway Remote Code Execution Vulnerability

Microsoft Windows Remote Desktop Gateway is a Windows-based remote desktop gateway. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Gateway RD Gateway. An attacker could exploit this vulnerability by connecting to the target system using RDP and sending a speciall...

Vulnerabilities fixed in Nginx

A malicious party could exploit the vulnerability to obtain system data obtain system data. To exploit the vulnerability, the malicious party must make a specially prepared HTTP request. The developers of Nginx have made updates available to fix the vulnerability. You can download the updates fro...

Cisco UCS Director Access Control Error Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. An access control error vulnerability exists in the authentication logic of the web management interface in Cisco UCS Director Releases prior to 6.7.3.1. A remote attacker could exploit t...

ABB PB610 Panel Builder 600 PB610 HMIStudio DLL Parsing Vulnerability

ABB PB610 Panel Builder 600 is a software for designing graphical user interfaces for the CP600 control panel platform. A security vulnerability in the ABB PB610 Panel Builder 600 PB610 HMIStudio component parsing DLL allows remote attackers to exploit the vulnerability by submitting a special fi...