The vulnerability of the eLearning Server 4G system regarding access control allows a hacker to gain access and modify the user’s portfolio.

The vulnerability of the eLearning Server 4G system management and development framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access—and modify—user portfolios by altering the value of the user identifier in HTTP request...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

UBUNTU-CVE-2019-12387

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

CVE-2019-0981

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980...

CVE-2019-0980

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951...

CVE-2019-0980

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

Denial of service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

Denial of service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980...

CVE-2019-0981

CVE-2019-0981 is an active DoS issue affecting Microsoft .NET Framework/.NET Core where IPAddress.TryCreate crashes, leading to ASP.NET Core denial of service. The CentOS advisory RHSA-2019:1259 notes the CVE as the crash in IPAddress.TryCreate, tied to .NET components; remediation is to upgrade ...

CVE-2019-0980

CVE-2019-0980 is a denial-of-service vulnerability affecting Microsoft .NET Framework and .NET Core where improper handling of web requests can be exploited to disrupt availability. The linked CentOS Nessus/RHSA entry corroborates a DoS scenario tied to Uri.TryCreate in ASP.NET Core. The public d...

Denial Of Service (DoS)

.NET Core and ASP.NET Core is vulnerable to denial of service. The vulnerability exists due to the improper handling of web requests. A remote attacker could issue a malicious web request to exploit crash the process...

CVE-2019-1824

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplie...

.NET Core SDK Multiple DoS Vulnerabilities-01 (May 2019)

ASP.NET Core SDK is prone to multiple DoS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:.netcoresdk"...

.NET Core Multiple DoS Vulnerabilities-02 (May 2019)

ASP.NET Core is prone to multiple DoS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:asp.netcore" ;...

PT-2019-2411 · Cisco · Cisco Evolved Programmable Network (Epn) Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-based management interface of the affected...

PT-2019-2413 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network EPN Manager versions affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-bas...