CVE-2016-5285

CVE-2016-5285 is a NULL pointer dereference in Mozilla NSS caused by a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime. The vulnerability can allow a remote attacker to crash a TLS/SSL server (Denial of Service). Affected context in the provided documents includes NS...

CVE-2023-7031

CVE-2023-7031 : Insecure Direct Object Reference in Avaya Aura Experience Portal Manager allows partial information disclosure to an authenticated non-privileged user. Affected: Avaya Aura Experience Portal Manager versions 8.0.x and 8.1.x prior to 8.1.2 patch 0402; versions prior to 8.0 are end ...

CVE-2021-25656

CVE-2021-25656 refers to stored XSS vulnerabilities in the Avaya Aura Experience Portal Web management interface. The issue is exploitable by an authenticated user and could disclose sensitive information. Affected versions are 7.0–7.2.3 (without hotfix) and 8.0.0 (without hotfix). The available ...

CVE-2021-25655

CVE-2021-25655 affects Avaya Aura Experience Portal, specifically the System Service Menu component, enabling URL redirection to untrusted sites via a crafted input. Affected versions: 7.0–7.2.3 (without hotfix) and 8.0.0 (without hotfix). The connected documents describe an input-validation/redi...