6255 matches found
undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS
A vulnerability was found in the Undertow HTTP server listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the IIOP and T3 network protocols...
The vulnerability of the Siemens SPPA-T3000 application server allows a hacker to gain access to confidential information.
The vulnerability of the Siemens SPPA-T3000 application server is related to the transmission of data in an open manner. Exploiting this vulnerability can allow attackers to access confidential information...
The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...
Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31409)
The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'list' parameter to the /goform/SetNetControlList URL...
CVE-2020-13391
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13392
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13390
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
Unrestricted file upload
Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code and sometimes terminal commands on a server by making an avatar update and then visiting the avatar file under the /images/ path...
CVE-2020-8617
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or successfully guesses the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration doe...
Dovecot Resource Management Error Vulnerability
Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . Dovecot suffers from a resource management error vulnerability. The vulnerability originates from a network system or product that mismanages system resources e.g., memory, disk space, files, etc.. An attacker...
CVE-2020-8617
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or successfully guesses the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration doe...
qdPM 9.1 Arbitrary File Upload
Exploit Title: qdPM 9.1 - Arbitrary File Upload Date: 2020-05-06 Author: Besim ALTINOK Vendor Homepage: https://sourceforge.net/projects/qdpm/ Software Link: https://sourceforge.net/projects/qdpm/ Version: v9.1 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...
qdPM 9.1 - Arbitrary File Upload
Exploit Title: qdPM 9.1 - Arbitrary File Upload Date: 2020-05-06 Author: Besim ALTINOK Vendor Homepage: https://sourceforge.net/projects/qdpm/ Software Link: https://sourceforge.net/projects/qdpm/ Version: v9.1 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...
The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.
The vulnerability of many elements of the DAViCal calendar exchange server is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially crafted HTML page...
Local File Inclusion
Teampass is vulnerable to local file inclusion. It does not sanitize the newValue HTTP request provided by the user along with sources/users.queries.php to choose language preferences, allowing a user to include malicious PHP file and to execute directly on the server...
CVE-2020-2780
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
The vulnerability of the DHCP server dhcpd and the DNS server BIND, related to resource release errors, allows a perpetrator to cause service failure.
The vulnerability of the DHCP server dhcpd and the DNS server BIND is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29402)
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...
