3955 matches found
Supra Smart Cloud TV Remote File Inclusion
This module exploits an unauthenticated remote file inclusion which exists in Supra Smart Cloud TV. The media control for the device doesn't have any session management or authentication. Leveraging this, an attacker on the local network can send a crafted request to broadcast a fake video. This...
Apache Zookeeper Information Disclosure Vulnerability
Apache Zookeeper is able to provide open source distributed configuration services for large-scale distributed computing , synchronization services and naming registry and other functions . Apache Zookeeper suffers from an information disclosure vulnerability that allows remote attackers to explo...
Authentication flaw
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI...
Schneider Electric Modicon Out-of-Bounds Write Denial of Service Vulnerability
The Schneider Electric Modicon M580, M340 is a programmable automation controller. An out-of-bounds write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used in a...
Information Disclosure
Firefox ESR and Firefox are vulnerable to information disclosure. A remote unauthenticated user can send a specially crafted request to view potentially sensitive information on the target system. The Fetch API component is affected...
Microsoft .NET Framework and .NET Core Denial of Service Vulnerability (CNVD-2019-14683)
NET Framework and .NET Core are both products of Microsoft Corporation.Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building applications for Windows, Windows Store, Windows Server, and Microsoft Azure. NET Framework is a comprehensive...
The vulnerability in the web interface of the microprogramming software for Cisco TelePresence Video Communication Server and Cisco Expressway software allows a perpetrator to bypass security restrictions and access the web interface.
The vulnerability of the web interface of the microprogramming software for Cisco TelePresence Video Communication Servers and Cisco Expressway software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to bypass...
Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability
Microsoft Windows 7 is an operating system released by Microsoft.Windows Server 2008 is a server operating system released by Microsoft.Microsoft Windows XP is a popular Windows operating system.Microsoft Windows Server 2003 R2 is a set of server operating systems released by Microsoft Corporatio...
Microsoft SharePoint Spoofing Vulnerability (CNVD-2019-39024)
Microsoft SharePoint is a browser-based collaboration and document management platform. A spoofing vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially crafted web request to conduct a cross-site scripting attack, which could run script...
Facebook WhatsApp Buffer Overflow Vulnerability
Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. Facebook WhatsApp suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability to submit a special request that can be us...
CVE-2019-1867 Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability
A vulnerability in the REST API of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted...
CVE-2018-20580
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
CVE-2018-20580
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
CVE-2019-10952
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370...
The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to gain access to protected information.
The vulnerability of the Cisco IOS XE operating system’s web interface is related to configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using a specially crafted request...
HooToo HT-05 Remote Code Execution
A remote code execution vulnerability exists in HooToo HT-05 travel router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 allows a perpetrator to cause a service failure.
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 is related to deficiencies in the validation of data entered by users. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted request...
DEBIAN-CVE-2019-11072
lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c. NOTE:...