Codesys Control Buffer Overflow (CVE-2019-18858)

A heap-based buffer overflow vulnerability exists in CoDeSys V3. The vulnerability is due to improper validation of user-supplied data sent to the CODESYS V3 web server URL endpoint. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the server...

HPE Intelligent Management Center Remote Code Execution (CVE-2019-5387)

A remote code execution vulnerability exists in HPE Intelligent Management Center. A remote attacker can exploit this vulnerability by sending a crafted request to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

HPE Intelligent Management Center Command Injection (CVE-2019-5373; CVE-2019-5374)

Multiple Command Injection vulnerabilities exist in HPE Intelligent Management Center. The vulnerabilities are due to insufficient handling of the beanName request parameter by the CustomReportTemplateSelectBean and operatorGroupTreeSelectContent classes. A remote, authenticated attacker can...

CVE-2020-4213

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024...

Atlassian Confluence Server Information Disclosure (CVE-2019-3394)

A local file inclusion vulnerability exists in Atlassian Confluence Server. This vulnerability is due to improper validation of file path. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to...

PT-2020-3632 · Coturn +3 · Coturn +3

Name of the Vulnerable Software and Affected Versions: CoTURN version 4.5.1.1 Description: The issue is related to a denial-of-service vulnerability. It can be triggered by a specially crafted HTTP POST request, leading to a server crash and denial of service. An attacker can exploit this by...

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2020-10478)

Microsoft Exchange Server is a suite of e-mail service programs. Microsoft Exchange Server has a security vulnerability that can be exploited by a remote attacker to submit a special request that can gain the same privileges as any other user of Exchange Server...

Microsoft Windows Imaging Library Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A memory corruption security vulnerability exists in the Microsoft Windows Imaging Library, which can be exploited by remote attackers to submit a special request that can elevate privileges...

PostgreSQL Database Password Change Stack Buffer Overflow (CVE-2019-10164)

A stack buffer overflow exists in PostgreSQL Database. The vulnerability is due to a stack buffer overflow when setting a password. A remote, authenticated attacker could send a crafted request in order to trigger the vulnerability. Successful exploitation will result in arbitrary code execution...

CVE-2020-0693

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694...

CVE-2013-1360

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

Authentication flaw

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

Brocade Fabric OS Sensitive Information Disclosure Vulnerability

Brocade Fabric OS is a set of embedded operating systems used in devices such as switches and routers. Brocade Fabric OS has a security vulnerability that can be exploited by a remote attacker to submit a special request that can be used to obtain sensitive information between a switch and a serv...

Unspecified vulnerability in MISP (CNVD-2020-16094)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in versions of MISP prior to 2.4.121, which can be exploit...

Squid buffer overflow vulnerability (CNVD-2020-04520)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow and...

Kronos WebTA "com.threeis.webta.H491delegate" servlet elevation of privilege vulnerability (CNVD-2020-14347)

Kronos WebTA is an attendance system. A security vulnerability exists in the Kronos WebTA "com.threeis.webta.H491delegate" servlet, which can be exploited by a remote attacker to submit a special request that can elevate privileges...

Cisco Small Business Switches web UI Denial of Service Vulnerability

Cisco Small Business Switches is a Cisco enterprise switch device. An input validation vulnerability in the Cisco Small Business Switches WEB UI allows remote attackers to exploit the vulnerability to submit a special request, which can be used in a denial of service attack...

CODESYS Control Remote Denial of Service Vulnerability

CoDeSys is a powerful PLC software programming tool. CODESYS Control memory allocation is vulnerable and can be exploited by a remote attacker to submit a special request, which can be used in a denial of service attack...

The vulnerability of the web interface of the Mongo-express database management system for MongoDB allows a hacker to execute arbitrary code on the target system by sending a specially crafted request.

The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...

[ASA-202002-1] python-django: sql injection

Arch Linux Security Advisory ASA-202002-1 ========================================= Severity: Medium Date : 2020-02-03 CVE-ID : CVE-2020-7471 Package : python-django Type : sql injection Remote : Yes Link : https://security.archlinux.org/AVG-1091 Summary ======= The package python-django before...