CVE-2016-0858

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

CVE-2016-0858

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

SAP Afaria Security Bypass Vulnerability

SAP Afaria is a mobile device management solution from SAP. SAP Afaria suffers from a security vulnerability that allows a remote attacker to bypass authentication checks, wipe information or lock a mobile device by sending a specially crafted request...

WordPress < 4.4.1 class-wp-theme.php XSS

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.4.1. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input to the file wp-includes/class-wp-theme.php before...

DEBIAN-CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

UBUNTU-CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2015-8669

libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Design/Logic Flaw

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

Cisco EPC3928 devices with EDVA security mechanism bypass vulnerability

The Cisco EPC3928 devices is a wireless router product from Cisco USA. A security mechanism bypass vulnerability exists in Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,5.7.1. Allows remote attackers to pass expected authentication requirements and perform unspecified administrative functions vi...

WordPress < 4.2.4 Multiple Vulnerabilities

Binary data 9031.prm...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

The vulnerability of Microsoft Exchange Server allows attackers to circumvent existing access restrictions and redirect network traffic.

The vulnerability of Microsoft Exchange Server web applications is related to code errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and redirect network traffic through a specially crafted request...

ZOHO ManageEngine Firewall Analyzer Security Bypass Vulnerability

ZOHO ManageEngine Firewall Analyzer is a suite of web-based firewall log analysis tools that collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers across the enterprise. A security bypass vulnerability exists in ZOHO ManageEngine Firewall Analyzer,...

OpenNMS Java Object Deserialization RCE

The remote OpenNMS server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a crafted RMI request, to execute arbitrar...

CVE-2015-6388

Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...

Cisco UCS Central Software Server-Side Request Forgery Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Central software could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...

Network Time Protocol Daemon Pidfile Driftfile Arbitrary File Overwrite (CVE-2015-7709)

An arbitrary file overwrite vulnerability exists in the Network Time Protocol daemon NTPD. The vulnerability is due to NTPD allowing remote clients to change the pidfile and driftfile configuration options to any arbitrary file, allowing any file on the target system to be overwritten. A remote,...