Apache Multiviews Arbitrary Directory Listing

The Apache web server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by sending a crafted request, to display a listing of a remote directory, even if a valid index file exists in the directory. C Tenable...

CVE-2016-0039

Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...

Apache Camel Remote Code Execution Vulnerability (CNVD-2014-01444)

Apache Camel is a set of rule-based routing and mediation engines. A security vulnerability exists in Apache Camel that allows remote attackers to submit a special request to execute arbitrary code...

NTP Denial of Service Vulnerability (CNVD-2016-00896)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...

PHP FPM 'fpm_log.c' Buffer Overflow Vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A buffer overflow vulnerability in PHP FPM 'fpmlog.c' allows remote attackers to exploit the vulnerability to submit a special request to crash the application...

NTP Denial of Service Vulnerability (CNVD-2016-00897)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that allows a remote attacker to submit a special request for a denial-of-service attack...

NTP Denial of Service Vulnerability (CNVD-2016-00895)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...

CVE-2016-1303

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...

Rockwell Automation MicroLogix 1100 PLC Stack Buffer Overflow Vulnerability

The Rockwell Automation Allen-Bradley MicroLogix 1100 1763-L16AWA is a programmable logic controller PLC product from Rockwell USA. A stack buffer overflow vulnerability in the Rockwell Automation Allen-Bradley MicroLogix 1100 PLC can be exploited by a remote attacker to submit a special request ...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Report Manager Report Display Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Report Manager Report Display component, which allows remote attackers to exploit the vulnerability by submitting a special request to...

Unspecified Vulnerability in Oracle E-Business Suite Oracle CRM Technology Foundation BIS Common Component (CNVD-2016-00660)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle CRM Technology Foundation BIS Common component, which could be exploited by remote attackers to submit a special request to modify data...

The vulnerability of the Lepide Active Directory Self Service tool, which allows a malicious individual to change the passwords of arbitrary users

The vulnerability of the Lepide Active Directory Self Service tool is related to errors in the implementation of the password reset function. Exploiting this vulnerability could allow an attacker to change the passwords of arbitrary users through a specially created request...

CVE-2016-0858

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

CVE-2016-0858

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

CVE-2016-0858

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

SAP Afaria Security Bypass Vulnerability

SAP Afaria is a mobile device management solution from SAP. SAP Afaria suffers from a security vulnerability that allows a remote attacker to bypass authentication checks, wipe information or lock a mobile device by sending a specially crafted request...

WordPress < 4.4.1 class-wp-theme.php XSS

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.4.1. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input to the file wp-includes/class-wp-theme.php before...

DEBIAN-CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

UBUNTU-CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...