Microsoft Project Server and SharePoint Enterprise Server Elevation of Privilege Vulnerability (CNVD-2018-05733)

Microsoft Project Server and SharePoint Enterprise Server are both products of Microsoft Corporation, U.S.A. Microsoft Project Server 2013 is a project management solution for project portfolio management PPM and day-to-day work. SharePoint Enterprise Server 2016 is an enterprise business...

CVE-2017-1681

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.15 could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. IBM X-Force ID: 134003...

Microsoft Windows RPC Remote Code Execution Vulnerability

Microsoft Windows is a popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows RPC, which can be exploited by a remote attacker to execute arbitrary code due to improper handling of requests by the Remote Access Service...

CVE-2017-11883

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability"...

CVE-2017-11780

The Server Message Block 1.0 SMBv1 on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly...

Cross site scripting

Cross-site scripting XSS vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to...

Cross-Site Request Forgery Vulnerability in Multiple IBM Products (CNVD-2017-10743)

IBM Global Retention Policy and Schedule Management is a single retention management system. An unspecified cross-site request forgery vulnerability exists in multiple IBM products, which stems from a program's failure to properly validate HTTP requests. A remote attacker could exploit the...

Pivotal Software Spring Social Core Cross-Site Request Forgery Vulnerability

Pivotal Software Spring Social Core is a set of APIs for connecting social services from Pivotal Software, USA. A cross-site request forgery vulnerability exists in Pivotal Software Spring Social Core versions 1.0.0 to 1.0.3 and 1.1.0 to 1.1.2, which stems from the program failing to properly...

The vulnerability of Microsoft SharePoint’s electronic document management system, which allows a malicious individual to increase their privileges

Microsoft SharePoint software contains a vulnerability related to improper filtering of specially crafted requests sent to the server. Exploiting this vulnerability allows a malicious actor to elevate their privileges by sending specially crafted requests to the vulnerable SharePoint server,...

Microsoft Windows Assisted Login Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Assisted Login Service for Microsoft Windows, which arises from a program's failure to properly manage request handles in memory. A local attacker...

Vesta Control Panel Cross-Site Request Forgery Vulnerability

Vesta Control Panel is an open source web hosting control panel. A cross-site request forgery vulnerability exists in Vesta Control Panel. As the program fails to properly validate HTTP requests. An attacker could use this vulnerability to perform unauthorized actions on a user's logged in...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

CVE-2013-1088

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

Debian DSA-224-1 : canna - buffer overflow and more

Several vulnerabilities have been discovered in canna, a Japanese input system. The Common Vulnerabilities and Exposures CVE project identified the following vulnerabilities : - CAN-2002-1158 BugTraq Id 6351: 'hsj' of Shadow Penguin Security discovered a heap overflow vulnerability in the...

Comersus Cart Improper Request Handling

Comersus Cart Improper Request Handling Release Date: July 6, 2004 Severity: Medium Vendor: Comersus Open Technologies Software: Tested on Comersus Cart 5.09 Previous versions may also be affected. Remote: Remotely executed from any web browser Technical Details: The unethical user is able to...

HP Instant TopTools 5.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/7246/info It has been reported that Instant TopTools does not properly handle some types of requests. Because of this, a remote user could potentially deny service to a host using the vulnerable software...

Microsoft ActiveSync 3.5 - Null Pointer Dereference Denial of Service

// source: https://www.securityfocus.com/bid/7150/info A problem with ActiveSync could make it possible for remote users to trigger a denial of service. It has been reported that under some circumstances, the ActiveSync wcescomm service can be forced to crash. Due to improper handling of some...

Luca Deri ntop 1.2 a7-9 - Unauthorized File Retrieval

source: https://www.securityfocus.com/bid/1550/info ntop is a tool that shows the network usage, similar to what the popular top Unix command does. Starting ntop in web mode with the -w parameter starts ntop with it's own built in HTTP server, to allow remote access to the functions it provides...