Unspecified Arbitrary Code Execution Vulnerability in Oracle Solaris Cluster

Oracle Solaris Cluster is a product that provides expanded high availability and disaster recovery capabilities. An unspecified security vulnerability exists in the Oracle Solaris Cluster System management child, which can be exploited by a local attacker to execute arbitrary code by submitting a...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Solaris Cluster (CNVD-2015-00620)

Oracle Solaris Cluster is a product that provides expanded high availability and disaster recovery capabilities. An unspecified security vulnerability exists in the Oracle Solaris Cluster System management child, which can be exploited by a remote attacker to execute arbitrary code by submitting ...

Easy-Chat-Server-3.1

Easy Chat Server contains an overflow condition that is triggered as user-supplied input is not properly validated when handling input passed via the 'username' parameter to the /chat.ghp script. This may allow a remote attacker to cause a buffer overflow, resulting in a denial of service or...

Xxe

XML external entity XXE vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint...

CVE-2014-0171

XML external entity XXE vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint...

CVE-2014-100025

Cross-site request forgery CSRF vulnerability in index.php/userdata/insertuser in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php/userdata/insertuser in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the 1 Enable Wireless, 2 MBSSID, 3 BSSID, 4 Hide Access Point, 5 SSID, 6 Country, 7 Channel...

Cisco Identity Services Engine Periodic Backup Password Disclosure Vulnerability

A vulnerability in the periodic backup functionality of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to discover the password used to encrypt the backup on the system. The vulnerability is due to improper processing of certain client requests by the affected...

i.Ftp Server Remote Stack Buffer Overflow Vulnerability

i.Ftp Server is an FTP service program. A remote stack buffer overflow vulnerability exists in i.Ftp Server, which could be exploited by a remote attacker to submit a special request to crash the service program...

ManageEngine Desktop Central Administrator Account Creation

This module exploits an administrator account creation vulnerability in Desktop Central from v7 onwards by sending a crafted request to DCPluginServelet. It has been tested in several versions of Desktop Central including MSP from v7 onwards. This module requires Metasploit:...

Dell OpenManage Web Server Buffer Overflow - Ver2 (CVE-2004-0331)

A buffer overflow vulnerability exist in Dell's OpenManage Web Server. The vulnerability is due to an boundary error when handling application parameter. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server...

Dell OpenManage Web Server Buffer Overflow - Ver2 (CVE-2004-0331)

A buffer overflow vulnerability exist in Dell's OpenManage Web Server. The vulnerability is due to an boundary error when handling application parameter. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted request to the vulnerable server...

CVE-2014-8017

The periodic-backup feature in Cisco Identity Services Engine ISE allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673...

CVE-2014-8017

The periodic-backup feature in Cisco Identity Services Engine ISE allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673...

GLSA-201412-16 : CouchDB: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-16 CouchDB: Denial of Service CouchDB does not properly sanitize the count parameter for Universally Unique Identifiers UUID requests. Impact : A remote attacker could send a specially crafted request to CouchDB, possibly...

CVE-2014-8515

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

Design/Logic Flaw

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

CVE-2014-8515

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000...

Xxe

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...