Lucene search
K

27 matches found

Prion
Prion
added 2021/12/23 8:15 p.m.15 views

Design/Logic Flaw

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server 12.7.7 and earlier, allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the...

5CVSS7.7AI score0.009EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/10/09 10:15 p.m.2 views

CVE-2019-17415

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

9.8CVSS6.4AI score0.04383EPSS
Exploits0References1
NVD
NVD
added 2019/10/09 10:15 p.m.27 views

CVE-2019-17415

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

9.8CVSS10AI score0.04383EPSS
Exploits0References1
Prion
Prion
added 2019/10/09 10:15 p.m.18 views

Stack overflow

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

7.5CVSS10AI score0.72158EPSS
Exploits7References1Affected Software1
Cvelist
Cvelist
added 2019/10/09 9:52 p.m.34 views

CVE-2019-17415

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

10AI score0.04383EPSS
Exploits0References1
Talos
Talos
added 2019/05/13 12:0 a.m.141 views

Novatek NT9665X HFS Recv buffer overflow code execution vulnerability

Summary An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version “RoavA1SWV1.9.” A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code executio...

10CVSS9.3AI score0.02853EPSS
Exploits1
Packet Storm
Packet Storm
added 2018/06/18 12:0 a.m.37 views

Tapplock Smart Lock Insecure Direct Object Reference

The server http://api.tapplock.com/ which servers as the api server for the tapplock smart lock is vulnerable to multiple authorization bypasses allowing horizontal escalation of privileges which could lead to the disclosure of all the info of all users and total compromise of every lock. The...

7.4AI score
Exploits0
Rows per page
Query Builder