3955 matches found
CVE-2016-2044
libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
CVE-2016-2042
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...
Design/Logic Flaw
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
UBUNTU-CVE-2016-2044
libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
CVE-2016-2042
phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...
CVE-2016-2038
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...
Apache Multiviews Arbitrary Directory Listing
The Apache web server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by sending a crafted request, to display a listing of a remote directory, even if a valid index file exists in the directory. C Tenable...
CVE-2016-0039
Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...
Apache Camel Remote Code Execution Vulnerability (CNVD-2014-01444)
Apache Camel is a set of rule-based routing and mediation engines. A security vulnerability exists in Apache Camel that allows remote attackers to submit a special request to execute arbitrary code...
NTP Denial of Service Vulnerability (CNVD-2016-00897)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that allows a remote attacker to submit a special request for a denial-of-service attack...
NTP Denial of Service Vulnerability (CNVD-2016-00895)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
NTP Denial of Service Vulnerability (CNVD-2016-00896)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
PHP FPM 'fpm_log.c' Buffer Overflow Vulnerability
PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A buffer overflow vulnerability in PHP FPM 'fpmlog.c' allows remote attackers to exploit the vulnerability to submit a special request to crash the application...
CVE-2016-1303
The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...
Rockwell Automation MicroLogix 1100 PLC Stack Buffer Overflow Vulnerability
The Rockwell Automation Allen-Bradley MicroLogix 1100 1763-L16AWA is a programmable logic controller PLC product from Rockwell USA. A stack buffer overflow vulnerability in the Rockwell Automation Allen-Bradley MicroLogix 1100 PLC can be exploited by a remote attacker to submit a special request ...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Report Manager Report Display Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Report Manager Report Display component, which allows remote attackers to exploit the vulnerability by submitting a special request to...
Unspecified Vulnerability in Oracle E-Business Suite Oracle CRM Technology Foundation BIS Common Component (CNVD-2016-00660)
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle CRM Technology Foundation BIS Common component, which could be exploited by remote attackers to submit a special request to modify data...
The vulnerability of the Lepide Active Directory Self Service tool, which allows a malicious individual to change the passwords of arbitrary users
The vulnerability of the Lepide Active Directory Self Service tool is related to errors in the implementation of the password reset function. Exploiting this vulnerability could allow an attacker to change the passwords of arbitrary users through a specially created request...