Western Digital My Cloud NAS Elevation of Privilege Vulnerability

Western Digital My Cloud is a personal cloud storage device. A security vulnerability exists in the Western Digital My Cloud NAS that can be exploited by a remote attacker to submit a special request that can elevate privileges...

Default configuration

Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaled they are disputing our claims." The CVE suggests that there is a security issue with how ModSecurity handles regular expressions that can result in a Denial...

CVE-2020-15598

Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaled they are disputing our claims." The CVE suggests that there is a security issue with how ModSecurity handles regular expressions that can result in a Denial...

Gigadevice GD32F103 Code Execution Vulnerability

The Gigadevice GD32F103 is a Mega Easy microcontroller device. The Gigadevice GD32F103 security protection suffers from a code execution vulnerability that can be exploited by a physically-accessible attacker to submit a special request, redirect control flow and execute arbitrary code...

Windows Wireless Network Manager Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. An elevation of privilege vulnerability exists in Windows Wireless Network Manager, which can be exploited by remote attackers to submit a special request that can elevate privileges...

HP Samsung Mobile Print Information Disclosure Vulnerability

HP Samsung Mobile Print is a laser printer device. A security vulnerability exists in the HP Samsung Mobile Print configuration information, which can be exploited by a remote attacker to submit a special request that could obtain sensitive information...

Weak Password Vulnerability in Enphase Envoy

The Enphase Envoy is the home energy control gateway at the heart of the Enphase Energy home energy solution. A weak password vulnerability exists in Enphase Envoy. A remote attacker is allowed to exploit the vulnerability to submit a special request for unauthorized access to the application...

Apple iOS Foundation Memory Corruption Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. A memory corruption vulnerability exists in Apple iOS Foundation, which allows local attackers to exploit the vulnerability to submit a special request for elevated privileges...

Git Submodule Arbitrary Code Execution Vulnerability

Git is an open source distributed version control system A security vulnerability in the handling of the '-' character in the Git Submodule allows remote attackers to exploit the vulnerability by submitting a special request that can execute arbitrary code...

HPE CentralView Fraud Risk Management Elevation of Privilege Vulnerability

HPE CentralView Fraud Risk Management is an end-to-end solution for addressing fraud control issues. An elevation of privilege vulnerability exists in HPE CentralView Fraud Risk Management, which can be exploited by an attacker to submit a special request to elevate privileges...

CMS Security Bypass Vulnerability in Joomla!

Joomla! is a content management system. A security bypass vulnerability exists in Joomla! CMS that could be exploited by remote attackers to submit a special request, bypass certain security restrictions, and perform unauthorized operations...

Joomla! CMS Information Disclosure Vulnerability

Joomla! is a globally recognized content management system developed using the PHP language with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! CMS that can be exploited by...

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft Windows is a popular operating system. A remote code execution vulnerability exists in the Microsoft Windows Shell, which can be exploited by a remote attacker to submit a special request to execute arbitrary code or crash the application in the application context...

Microsoft Windows Kernel Mode Driver Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A local elevation of privilege vulnerability exists in the Microsoft Windows Kernel Mode Driver, which allows an attacker to exploit the vulnerability by submitting a special request to elevate privileges...

Red Hat Feedhenry Enterprise Mobile Application Platform Arbitrary Code Execution Vulnerability

Red Hat Feedhenry Enterprise Mobile Application Platform is a suite of enterprise mobile application platforms from Red Hat USA. A security vulnerability exists in the Red Hat Feedhenry Enterprise Mobile Application Platform that could be exploited by a remote attacker to submit a special request...

Cisco ASR 1000 Unauthorized Access Vulnerability

The Cisco ASR 1000 is a system router offered by Cisco. The Cisco ASR 1000 has a security vulnerability in the motherboard console port that allows an attacker to exploit the vulnerability by submitting a special request for unauthorized access to the system...

Directory Traversal Vulnerability in Tenda W15E Devices

The Tenda W15E devices is a dual-band wireless router from China's Tenda. A directory traversal vulnerability exists in the Tenda W15E devices, which allows remote attackers to submit a special request to view the contents of system files in an application context...

Google Chrome Type Obfuscation Error Vulnerability

Google Chrome is an open source web browser. A type obfuscation vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary code...

Microsoft Windows Express Remote Code Execution Vulnerability

Microsoft Windows is the popular operating system. Microsoft Windows does not properly handle constructed embedded fonts, allowing an attacker to exploit a vulnerability by submitting a special request that could execute arbitrary code...

Red Hat OpenShift3 Kubernetes Sensitive Information Disclosure Vulnerability

Red Hat OpenShift3 is a Platform-as-a-Service PaaS cloud computing platform that builds, tests, deploys and runs applications. A security vulnerability in Red Hat OpenShift3 Kubernetes allows remote attackers to exploit the vulnerability by submitting a special request to access images that are...