CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Design/Logic Flaw

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

Cisco EPC3928 devices with EDVA security mechanism bypass vulnerability

The Cisco EPC3928 devices is a wireless router product from Cisco USA. A security mechanism bypass vulnerability exists in Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,5.7.1. Allows remote attackers to pass expected authentication requirements and perform unspecified administrative functions vi...

WordPress < 4.2.4 Multiple Vulnerabilities

Binary data 9031.prm...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

The vulnerability of Microsoft Exchange Server allows attackers to circumvent existing access restrictions and redirect network traffic.

The vulnerability of Microsoft Exchange Server web applications is related to code errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and redirect network traffic through a specially crafted request...

ZOHO ManageEngine Firewall Analyzer Security Bypass Vulnerability

ZOHO ManageEngine Firewall Analyzer is a suite of web-based firewall log analysis tools that collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers across the enterprise. A security bypass vulnerability exists in ZOHO ManageEngine Firewall Analyzer,...

OpenNMS Java Object Deserialization RCE

The remote OpenNMS server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a crafted RMI request, to execute arbitrar...

CVE-2015-6388

Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...

Cisco UCS Central Software Server-Side Request Forgery Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Central software could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...

Network Time Protocol Daemon Pidfile Driftfile Arbitrary File Overwrite (CVE-2015-7709)

An arbitrary file overwrite vulnerability exists in the Network Time Protocol daemon NTPD. The vulnerability is due to NTPD allowing remote clients to change the pidfile and driftfile configuration options to any arbitrary file, allowing any file on the target system to be overwritten. A remote,...

The vulnerability of the application interface of the IBM WebSphere Portal server allows a hacker to circumvent existing access restrictions.

The vulnerability of the IBM WebSphere Portal application server’s user interface is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions by using a specially crafted request...

krb5: unauthenticated denial of service in recvauth_common() and others

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request...

OpenStack ironic-discoverd remote code execution vulnerability

OpenStack is a cloud platform management project. ironic-discoverd is one of the components that provides hardware internal self-testing service functionality. A security vulnerability exists in OpenStack ironic-discovered that allows remote attackers to exploit the vulnerability by submitting a...

IBM QRadar Security Information and Event Manager Denial of Service Vulnerability

IBM QRadar Security Information and Event Manager is a solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. A security vulnerability exists in IBM QRadar Security Information and Event Manager, which can be exploited by...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the PFE daemon in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure through a specially crafted request...

VMware ESXi 'SLPDProcessMessage()' function remote code execution vulnerability

VMware ESXi is a bare-metal virtualization hypervisor that is installed directly on a physical server and divides the physical server into multiple virtual machines. The program features less disk space, higher reliability and security. A remote code execution vulnerability exists in VMware ESXi,...