Denial of service

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability"...

Foscam IP Video Camera Buffer Overflow Vulnerability (CNVD-2017-34270)

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to overwrite arbitrary data...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

Circle with Disney Command Injection Vulnerability (CNVD-2017-32880)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the /api/CONFIG/restore function in Circle with Disney version 2.0.1. The vulnerability can ...

Circle with Disney Command Injection Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the notification feature in Circle with Disney version 2.0.1. The vulnerability can be...

The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers allows a hacker to elevate administrator privileges and gain full control over the device.

The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers is related to insufficient protection against HTTP requests. Exploiting this vulnerability allows a malicious actor, operating remotely as a Lobby Administrator, to elevate administrative privileges and gain...

CVE-2017-11775

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting XSS vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka...

Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability

Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016 are both enterprise business collaboration platforms from Microsoft Corporation USA. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, organizing...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-30538)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A cross-site scripting vulnerability exists in the implementation of Microsoft SharePoint Server when it does not properly filter incoming web requests, which can be exploited by an attack...

Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-32492)

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States of America Cisco Cisco company's set of audio and video conferencing server software.Web Admin Interface is one of the Web login interface. A denial of service vulnerability exists in the Web Admin Interfac...

Digium Asterisk GUI OS Command Injection Vulnerability

The Asterisk GUI is a framework for configuring graphical user interfaces. An OS command injection vulnerability exists in Digium Asterisk GUI, which could allow an attacker to execute arbitrary code on a system by injecting OS commands into the program's URL requests...

CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

Code injection

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

CVE-2017-6330

CVE-2017-6330 affects Symantec Encryption Desktop (SED) prior to version 10.4.1 MP2. The DoS vulnerability allows remote attackers to cause resource consumption to the affected system by sending crafted web requests. The issue is documented across multiple sources in the connected documents, all ...

CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

Cross site scripting

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...

Security Updates for Exchange (September 2017)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who...