Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2025-1041
- EPSS 0.14%
- Published 10.06.2025 06:15:22
- Last modified 30.07.2025 17:59:01
An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.
6.8
CVE-2023-3527
- EPSS 0.08%
- Published 18.07.2023 22:15:09
- Last modified 21.11.2024 08:17:28
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command ex...
7.5
CVE-2016-5285
- EPSS 0.65%
- Published 15.11.2019 16:15:10
- Last modified 21.11.2024 02:53:59
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
1