5938 matches found
CVE-2021-1552 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...
CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...
CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...
CVE-2021-1550 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...
Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is included in HTTP...
Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is...
Cisco Finesse Open Redirect Vulnerability
Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. An open redirection vulnerability exists in the Web management interface of Cisco Finesse 12.61 and...
The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to modify data or cause partial service disruption.
The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data through HTTP requests...
The vulnerability of the FMW Control Plugin sub-component of the Enterprise Manager Base Platform (EM Console) software platform of Oracle Enterprise Manager allows a attacker to cause a service failure.
The vulnerability of the FMW Control Plugin sub-component of the Enterprise Manager for Fusion Middleware software from Oracle exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures through HTTP requests...
The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.
The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...
CVE-2021-32455
SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...
CVE-2021-32455 SITEL CAP/PRX vulnerable to a denial of service attack
SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...
CVE-2021-32455
CVE-2021-32455 affects SITEL CAP/PRX firmware version 5.2.01. Affected component: firmware running on SITEL CAP/PRX devices. Root cause described as a resource/handling issue that allows an attacker with access to the device network to trigger a denial-of-service condition by sending HTTP request...
Unspecified Vulnerability in JetBrains WebStorm
JetBrains WebStorm is an application from the Czech company JetBrains. Provides an IDE for programming. A security vulnerability exists in JetBrains WebStorm versions prior to 2021.1. The vulnerability stems from the program's use of HTTP requests instead of HTTPS.No detailed vulnerability detail...
RHEL 8 : Red Hat OpenShift Service Mesh 1.1.14 (RHSA-2021:1540)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1540 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to the device.
The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...
The vulnerability of the Create Contracts sub-component of the Oracle Legal Entity Configurator, a component of the Oracle E-Business Suite, allows a violator to gain unauthorized access to the device.
The vulnerability of the Create Contracts sub-component of the Oracle Legal Entity Configurator, a component of the Oracle E-Business Suite, is related to code errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...
istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms
An authorization bypass flaw was found in Istio. This flaw allows an attacker to craft an HTTP request that defines a certain pattern of escaped characters in the URI path such as %2F, %2f, %5C, or %5c, allowing them to bypass the authorization service. The highest threat from this vulnerability ...
