6262 matches found
Untangle NG Firewall Captive Portal RCE
The Untangle NG Firewall server running on the remote host is affected by a remote code execution vulnerability in the Captive Portal module, specifically within the /capture/handler.py script, due to a failure to verify that a user is authenticated before processing file uploads. An...
Vulnerability of the IBM HTTP Server web server, allowing attackers to execute arbitrary code
The vulnerability of the Administration Server web server component of the IBM HTTP Server arises due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the Cisco Wireless LAN Controller 5500 software, which allows bypassing access restrictions
Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to the widespread use of the Aironet IOS software. This leads to a state where the controller acts as an administrative HTTP server. Exploiting this vulnerability allows malicious actors to bypass access restrictions by...
The vulnerability of the MySQL database management system allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in the MySQL Server component of Oracle MySQL allows unauthorized users, after passing authentication, to affect the accessibility of data by using the GIS subcomponent...
The vulnerability of the WebSphere Application Server software allows a malicious intruder to compromise the confidentiality of protected information.
The vulnerability in Proxy and ODR servers of IBM WebSphere Application Server allows a malicious actor in the network to access confidential information. This vulnerability is related to the improper processing of requests...
Vulnerability of Microsoft Lync Server software, allowing a remote attacker to compromise protected information
A vulnerability that allows access to confidential information exists in Lync Server. This vulnerability is related to the improper processing e.g., filtering of specially crafted content. If exploited successfully, a malicious individual can execute scripts in the user’s browser and gain access ...
The vulnerability of the Microsoft Office Web Apps package allows a remote attacker to execute arbitrary code with privileges of the current user.
The vulnerability of the Office Web Apps Server package, related to errors in processing specially crafted files, allows a malicious actor to execute arbitrary code with the privileges of the current user...
The vulnerability of the Linter Bastion database management system allows a malicious individual to cause errors in the program’s operation or execute arbitrary code.
The design of the RPC server linstmgr.exe is based on the assumption that client applications will always send valid data and behave as expected. Sending invalid data may cause errors in the program’s operation or may execute arbitrary code...
The vulnerability of the NameSurfer IP address management server allows attackers to gain access to files on the server with user namesurf privileges.
The vulnerability of the Nixu NameSurfer software lies in errors in the program’s code. Exploiting this vulnerability allows a malicious individual to gain access to files on the server with user privileges of namesurf...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Android operating system’s media server is related to the lack of checks for the size of OMX buffers. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the mm-video-v4l2 venc component in the Android operating system’s media server is related to incorrect handling of buffer size. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the mm-video-v4l2 venc component in the Android operating system’s media server is related to incorrect handling of buffer size. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the mm-video-v4l2 venc component in the Android operating system’s media server is related to incorrect handling of buffer size. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
CVE-2016-3227
Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."...
Design/Logic Flaw
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...
mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML...
Request Forgery Vulnerability in OurPHP Server Side
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has a hidden remote file download function. Since the...
Apple FileMaker Arbitrary Code Execution Vulnerability
Apple FileMaker on OS X is a set of Apple's database software that runs on a set of operating systems developed specifically for Mac computers. A security vulnerability exists in the server of Apple FileMaker on OS X platforms prior to version 14.0.4. The vulnerability can be exploited by a remot...
SAP MII 15.0 Directory Traversal
Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 29.07.2015 Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2230978 Author: Dmitry Chastuhin ERPScan Description 1...