3484 matches found
Microsoft SharePoint Spoofing Vulnerability (CNVD-2021-48892)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...
Microsoft SharePoint 输入验证错误漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...
OESA-2021-1073 resteasy security update
RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fixes: CVE-2016-9606...
Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Connect:Direct Web Services
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by IBM Connect:Direct Web Services. IBM Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java ...
Mysterious Macintosh Malware
This is weird: Once an hour, infected Macs check a control server to see if there are any new commands the malware should run or binaries to execute. So far, however, researchers have yet to observe delivery of any payload on any of the infected 30,000 machines, leaving the malwares ultimate goal...
CVE-2020-9050
Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...
CVE-2020-9050
Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...
Path traversal
Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...
CVE-2020-9050
The CVE-2020-9050 entry concerns Johnson Controls Metasys Reporting Engine (MRE) Web Services, where a Path Traversal vulnerability allows a remote unauthenticated attacker to access and download arbitrary files from the system. Affected versions include MRE v2.0 and v2.1; impact is high on confi...
How to Secure AWS Cloud Storage
Discover how to quickly install and integrate Trend Micro Cloud One with Amazon Web Services AWS...
Johnson Controls Metasys Reporting Engine Web Services Path Traversal Vulnerability
Johnson Controls Metasys Reporting Engine Web Services is a system hardware from Johnson Controls USA. Providing this web controller uses the latest developments in information technology to ensure that Metasys systems easily integrate and connect to expanding browsers and remote operation center...
The vulnerability of Apache CXF web services lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks.
The vulnerability of Apache CXF web services is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the styleSheetPath parameter...
The vulnerability of web services in the Spring Framework software platform allows attackers to compromise the confidentiality, integrity, and accessibility of information.
The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...
The vulnerability of the components of Web Services in Oracle WebLogic Server’s application servers allows attackers to gain access to modify, add, or delete data.
The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol over the network...
UBUNTU-CVE-2020-13576
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...
SAP BusinessObjects Business Intelligence Platform SSRF Vulnerability (direct check)
Binary data sapbusinessobjectsintelligenceplatformcve-2020-6308.nbin...
Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect Connect:Direct Web Services
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by Connect : Direct web service. Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION: An unspecified vulnerability in Java SE relat...
Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software
Cisco Adaptive Security Appliance Software and Firepower Threa...
Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Connect:Direct Web Services
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by IBM Connect:Direct Web Services. IBM Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java S...