CVE-2017-16255

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

ALE Alcatel OmniAccess Wireless Access Point Information Disclosure Vulnerability

The ALE Alcatel OmniAccess Wireless Access Point is a wireless access point device from ALE France. A security vulnerability exists in the ALE Alcatel OmniAccess Wireless Access Point. An attacker can exploit the vulnerability by sending a specially crafted URL to view configuration commands...

The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ event service allows a perpetrator to gain read access to data, modify data, or cause a partial service failure.

The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, or cause a partial service outage through HTTP...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to modify protected data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to modify protected data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete protected data...

The vulnerability of the Administration sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite, which allows a perpetrator to modify protected data.

The vulnerability of the Administration sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite enterprise automation system. Exploiting this vulnerability allows a malicious actor to remotely access and modify, add, or delete protected data through HTTP requests...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

The vulnerability of the administrative web interface of the Cisco Identity Services Engine allows a perpetrator to increase their privileges.

The vulnerability of the administrative web interface of the Cisco Identity Services Engine relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through specially crafted HTTP requests...

The vulnerability of the `oup_body_input_stream_read_chunked` function in the `libsoup` library of the GNOME graphical interface for Linux operating systems allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the oupbodyinputstreamreadchunked function in the libsoup/libsoup-body-input-stream.c file, a library for GNOME’s graphical interface in Linux operating systems, arises due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute...

Skype for Business and Lync Spoofing Vulnerability

A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

A vulnerability exists in the backup function of the Cisco Prime Infrastructure network monitoring and management system, which allows a intruder to disclose protected information.

The vulnerability in the backup function of the Cisco Prime Infrastructure monitoring and network equipment management system relates to the transmission of confidential information in GET requests. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

NEC Aterm W300P Buffer Overflow Vulnerability (CNVD-2019-01105)

The NEC Aterm W300P is a wireless router from Nippon Electric NEC. A buffer overflow vulnerability exists in the NEC Aterm W300P using firmware version 1.0.13 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with the help of HTTP requests and responses...

ASP.NET Core Denial of Service Vulnerability (January 2019)

A denial of service DoS vulnerability exists in ASP.NET Core Hosting Bundle module AspNetCoreModule ANCM due to improper handling of web requests. An unauthenticated, remote attacker can exploit this issue, via specially crafted requests, to cause the hosted application to stop responding.. C...

Microsoft Office SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-16199 )

Microsoft Office is an office software suite developed by Microsoft Corporation.Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform. A cross-site scripting vulnerability exists in Microsoft Office SharePoint, which arises from a failure of the program to proper...

Denial of service

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548...

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564...

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564...