3637 matches found
Vaadin Framework Detection (HTTP)
HTTP based detection of Vaadin Framework. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
OpenJDK: insufficient code privileges checks (JAX-WS, 8054367)
An improper permission check issue was discovered in the JAX-WS component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...
Red Hat CloudForms Management Engine SQL Injection Vulnerability
Red Hat CloudForms is hybrid cloud management software from Red Hat. A SQL injection vulnerability in Red Hat CloudForms Management Engine allows attackers to send specially crafted REST API requests to manipulate or obtain database data...
Multiple Buffer Overflow Vulnerabilities in VDG Security SENSE
VDG Security SENSE is a video management system. Multiple buffer overflow vulnerabilities in the VDG Security SENSE DIVA web service API allow remote attackers to submit a special AuthenticateUser request to execute arbitrary code via the user or password parameters...
CVE-2014-9451
Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...
CVE-2014-9451
Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...
CVE-2014-9451: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in the DIVA web service API /webservice in VDG Security SENSE formerly DIVA 2.3.13 allow remote attackers to execute arbitrary code via the 1 user or 2 password parameter in an AuthenticateUser request...
PT-2015-4214
Name of the Vulnerable Software and Affected Versions VDG Security SENSE version 2.3.13 Description The issue concerns multiple stack-based buffer overflows in the DIVA web service API, specifically at the "/webservice" endpoint. This allows remote attackers to execute arbitrary code by...
Samsung SyncThru Web Service unauthenticated access
User's account is not checked...
Vulnerabilities in Samsung SyncThru Web Service
Hello 3APA3A! There are Information Leakage and Insufficient Authorization vulnerabilities in SyncThru Web Service. This is web application for Samsung printers, particularly I found it with Samsung ML-1865W and other printers. Earlier I informed Samsung about it. ------------------------- Affect...
CVE-2014-7831
lib/classes/gradesexternal.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the getgrades web service...
CVE-2014-7831
lib/classes/gradesexternal.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the getgrades web service...
CVE-2014-7834
CVE-2014-7834 – Moodle : Affected: Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3. Component: mod/forum/externallib.php. Issue: does not verify group permissions when using the forum_get_discussions web service. Root cause: missing verification of group permissions in the forum web service call...
CVE-2014-7834
mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not verify group permissions, which allows remote authenticated users to access a forum via the forumgetdiscussions web service...
PT-2014-8298
Name of the Vulnerable Software and Affected Versions Moodle versions 2.7.x through 2.7.2 Description The issue allows remote authenticated users to obtain sensitive information by accessing the get grades web service, leveraging the student role. This occurs because the lib/classes/grades...
CVE-2014-7834: Undefined Security Weakness
mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not verify group permissions, which allows remote authenticated users to access a forum via the forumgetdiscussions web service...
Updated moodle package fixes security vulnerabilities
In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...
Visual Mining NetCharts Server Remote Code Execution Exploit
This Metasploit module exploits multiple vulnerabilities in Visual Mining NetCharts. First, a lack of input validation in the administration console permits arbitrary jsp code upload to locations accessible later through the web service. Authentication is typically required, however a 'hidden' us...