Avaya

Aura Application Enablement Services

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.7

CVE-2022-2975

  • EPSS 0.1%
  • Veröffentlicht 06.10.2022 18:15:59
  • Zuletzt bearbeitet 21.11.2024 07:02:00

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects App...

7.5

CVE-2016-5285

  • EPSS 0.65%
  • Veröffentlicht 15.11.2019 16:15:10
  • Zuletzt bearbeitet 21.11.2024 02:53:59

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

7.1

CVE-2009-3939

Exploit
  • EPSS 0.04%
  • Veröffentlicht 16.11.2009 19:30:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

5.5

CVE-2006-1058

  • EPSS 0.05%
  • Veröffentlicht 04.04.2006 10:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.