5539 matches found
Adobe Photoshop Express - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Adobe Photoshop Express published at the 'play' market has multiple vulnerabilities...
Express News - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Express News published at the 'play' market has multiple vulnerabilities...
EXPRESS - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application EXPRESS published at the 'play' market has multiple vulnerabilities...
EXPRESS MOBIL - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application EXPRESS MOBIL published at the 'play' market has multiple vulnerabilities...
AdWords Express - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application AdWords Express published at the 'play' market has multiple vulnerabilities...
DHL Express Mobile - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application DHL Express Mobile published at the 'play' market has multiple vulnerabilities...
Private Data Disclosure
Overview Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the...
periodicoexpress.com.mx XSS vulnerability
Vulnerable URL: http://www.periodicoexpress.com.mx/nota.php?id=295562%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 07:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability
Cisco IOS is the operating system developed by Cisco for its network devices.Cisco Wide Area Application Services Express is a Cisco WAAS product that is based on IOS and is integrated into routers to provide application acceleration capabilities as well as to reduce the cost of WAN bandwidth...
CVE-2016-1347
The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...
CVE-2016-1347
The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...
CVE-2016-1347
The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...
CVE-2016-1347
The CVE-2016-1347 issue affects Cisco IOS with WAAS Express (versions 15.1–15.5). It stems from improper validation of TCP segments in the WAAS Express feature, allowing an unauthenticated remote attacker to force a device reload via a crafted TCP segment, causing a denial of service. Exploitatio...
Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability
A vulnerability in the Wide Area Application Services WAAS Express feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of TCP segments. An attacker could exploit this vulnerability...
Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)
A buffer overflow vulnerability has been reported in Microsoft Outlook Express. The vulnerability is due to an insufficient boundary checking when the vulnerable product processes Network News Transfer Protocol NNTP server responses. An attacker can exploit this vulnerability to inject and execut...
CVE-2016-1992
HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors...
American Express Notifies of Data Breach
American Express has begun notifying cardholders that their data may have been compromised in a third-party breach. A notification letter filed on March 10 with California’s attorney general indicates that AmEx account numbers, user names and other information including expiration dates may have...
CVE-2016-1991
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors...
HP ArcSight ESM and ESM Express Command Execution Vulnerability
HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software from Hewlett-Packard HP that combine event correlation and security analysis capabilities. The software collects, correlates and reports on enterprise-wide security events in real time so...