Lucene search
+L

29 matches found

BDU FSTEC
BDU FSTEC
•added 2021/03/30 12:00 a.m.•19 views

The vulnerability of the software package that implements the Squid caching proxy server’s function relates to incorrect elimination of certain elements in the output data. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software package that implements the Squid caching proxy server lies in the improper elimination of certain elements in the output data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

6.1CVSS6.7AI score0.055EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•19 views

The vulnerability of the Adobe Download Manager’s download manager, related to incorrect elimination of special elements in the output data used by the incoming component, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Download Manager’s download manager is related to the incorrect elimination of certain elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9.3CVSS7.9AI score0.04847EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/05/19 12:00 a.m.•22 views

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the improper elimination of certain elements in the output data used by the incoming component, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV is related to incorrect elimination of special elements in the output data used by the incoming component. Exploitation of this vulnerability can allow...

8.5CVSS7.9AI score0.06831EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2015/06/23 4:52 p.m.•16 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 4:26 p.m.•16 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 4:17 p.m.•16 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/16 3:39 p.m.•17 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/04/01 2:48 p.m.•14 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2015/02/12 4:00 p.m.•61 views

CVE-2015-0227

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."...

5CVSS6.4AI score0.07543EPSS
SaveExploits0
Rows per page
Query Builder