2573 matches found
CVE-2017-11936
Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...
CVE-2017-11936
Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...
Privilege escalation
Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability"...
KLA11159 SUI vulnerability in Microsoft Exchange Server
Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories ADV170023...
Cohu 3960HD Information Disclosure Vulnerability
The Cohu 3960HD is an IP zoom camera from Cohu USA that is typically used as a traffic camera. The Cohu 3960HD suffers from an information disclosure vulnerability. An attacker can view and download source code, log files, and other sensitive device information via a specially crafted web request...
Microsoft ASP.NET Core Denial of Service Vulnerability
This host is missing an important security update according to Microsoft advisory CVE-2017-11883. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Huawei UMA Product SQL Injection Vulnerability
Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal to control and record the O&M operations performed by users, and supports auditing by command view and video playback. A SQL injection vulnerability exists in the Huawei UMA product, as the...
Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37113)
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core versions 1.0, 1.1, and...
Denial of service
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability"...
Foscam IP Video Camera Buffer Overflow Vulnerability (CNVD-2017-34270)
Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to overwrite arbitrary data...
ASP.NET Core Denial of Service Vulnerability
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...
Circle with Disney Command Injection Vulnerability
Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the notification feature in Circle with Disney version 2.0.1. The vulnerability can be...
Circle with Disney Command Injection Vulnerability (CNVD-2017-32880)
Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/restore function in Circle with Disney version 2.0.1. The vulnerability can ...
The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers allows a hacker to elevate administrator privileges and gain full control over the device.
The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers is related to insufficient protection against HTTP requests. Exploiting this vulnerability allows a malicious actor, operating remotely as a Lobby Administrator, to elevate administrative privileges and gain...
CVE-2017-11775
Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting XSS vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka...
Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-30538)
Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A cross-site scripting vulnerability exists in the implementation of Microsoft SharePoint Server when it does not properly filter incoming web requests, which can be exploited by an attack...
Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability
Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016 are both enterprise business collaboration platforms from Microsoft Corporation USA. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, organizing...
Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-32492)
Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States of America Cisco Cisco company's set of audio and video conferencing server software.Web Admin Interface is one of the Web login interface. A denial of service vulnerability exists in the Web Admin Interfac...
Digium Asterisk GUI OS Command Injection Vulnerability
The Asterisk GUI is a framework for configuring graphical user interfaces. An OS command injection vulnerability exists in Digium Asterisk GUI, which could allow an attacker to execute arbitrary code on a system by injecting OS commands into the program's URL requests...