PT-2017-14439

Name of the Vulnerable Software and Affected Versions Web Viewer version 1.0.0.193 Description The issue allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the "network ssl upload.php" endpoint. This is achieved by accessing the...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the NSURL component of CFNetwork SSL in the iOS operating system is related to cryptographic transformation errors. Exploiting this vulnerability can allow attackers to gain access to protected information through “man-in-the-middle” attacks and with the use of specially...

lighttpd to 1.4.35 (important)

lighttpd was updated to version 1.4.35, fixing bugs and security issues: CVE-2014-2323: SQL injection vulnerability in modmysqlvhost.c in lighttpd allowed remote attackers to execute arbitrary SQL commands via the host name, related to requestcheckhostname. CVE-2014-2323: Multiple directory...

CVE-2009-2700: Improper Input Validation

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...