Siemens SCALANCE X-200 Web Server Stack Buffer Overflow Vulnerability

Siemens SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A stack buffer overflow vulnerability exists in the Siemens SCALANCE X-200 web server. An attacker could exploit this vulnerability to cause a denial...

Siemens SCALANCE X-200 Web Server Heap Buffer Overflow Vulnerability

Siemens SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A heap buffer overflow vulnerability exists in the Siemens SCALANCE X-200 web server. An attacker could exploit the vulnerability to cause a denial o...

Command Execution Vulnerability in HYBBS

HYBBS is a PHP web program that supports plugin extensions and template extensions. HYBBS has a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in HYBBS

HYBBS is a PHP website program that supports plugin extensions and template extensions. HYBBS has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

CVE-2021-3328

An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application...

CVE-2021-3328

An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application...

Out-of-bounds

An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application...

CVE-2021-3328

The CVE-2021-3328 entry concerns Aprelium Abyss Web Server X1 versions 2.12.1 and 2.14. Affected component: the HTTP request handling in Abyss Web Server X1. Root cause: a crafted HTTP request can trigger an out-of-bounds read, which can crash the application. Impact is described as a crash; no f...

CVE-2021-3328

An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application...

Indico Tampering with links (e.g. password reset) in sent emails

Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's URL generation logic which could have allowed an attacker to make Indico send a password reset link with a valid token pointing to an attacker-controlled domain by sending that domain in the Host header. Ha...

Aprelium Abyss Web Server 缓冲区错误漏洞

Aprelium Abyss Web Server is a web server from the Tunisian company Aprelium. A security vulnerability exists in Aprelium Abyss Web Server X1 version 2.12.1 and version 2.14, which can be exploited by an attacker to potentially cause an out-of-bounds read via an HTTP request, which could result i...

CVE-2021-26758

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

CVE-2021-26758

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

Privilege escalation

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

CVE-2021-26758

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

CVE-2021-26758

CVE-2021-26758 : Affected product is OpenLiteSpeed web server (LiteSpeed Technologies) v1.7.8. The vulnerability enables privilege escalation by attackers gaining root terminal access and executing commands on the host. NVD CVSSv3.1 base score 8.8 (HIGH; Network attack, low complexity, privileges...

CVE-2021-26758

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system...

Design/Logic Flaw

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in...

CVE-2021-21425 Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in...

The vulnerability of the Coturn web server, related to incorrect input validation, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Coturn web server is related to improper validation of input data. Exploiting this vulnerability allows a remote attacker to access confidential data and compromise its integrity...