3959 matches found
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 allows a perpetrator to cause a service failure.
The vulnerability of the web interface of the microprogramming software for Cisco IP Phone 8800 is related to deficiencies in the validation of data entered by users. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted request...
DEBIAN-CVE-2019-11072
lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c. NOTE:...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
Improper access control
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...
CVE-2019-0798
A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'...
Design/Logic Flaw
IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774...
CVE-2015-5606
Vordel XML Gateway acquired by Axway version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request...
CVE-2015-5606
Vordel XML Gateway acquired by Axway version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request...
CVE-2018-1640
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force I...
CVE-2018-1906
IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663...
TIBCO Data Science Unauthorized Modification Vulnerability
TIBCO Spotfire Data Science is a data analytics platform. A security vulnerability exists in TIBCO Spotfire Data Science, which can be exploited by a remote attacker to submit a special request that can delete or modify data with elevated privileges...
Elevation of Privilege Vulnerability in Aviosoft DVD X Player Standard Software
Aviosoft DVD X Player Standard is a DVD player from the American company Aviosoft. An elevation of privilege vulnerability exists in the Aviosoft DVD X Player Standard software. The vulnerability allows an attacker to submit a specially crafted request to execute arbitrary code in the context of...
McAfee Network Security Manager Sensitive Information Disclosure Vulnerability
McAfee Network Security Manager is a network security management program. A sensitive information disclosure vulnerability exists in McAfee Network Security Manager, which allows remote attackers to exploit the vulnerability by submitting a special request to obtain sensitive information...
Foxit Reader Out-of-Bounds Read Vulnerability (CNVD-2019-08306)
Foxit Reader is a PDF document reader from Foxit China. An out-of-bounds read vulnerability exists in the Foxit Reader setInterval method of handling PDF files, which allows remote attackers to exploit the vulnerability by submitting a special request for a file that could crash the application o...
WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)
An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
The vulnerability of the TFTP Server component of the Windows Deployment Services service allows a perpetrator to execute arbitrary code.
The vulnerability of the TFTP Server component of the Windows Deployment Services service exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...