CVSS: 8.1EPSS: 0%CPEs: 6EXPL: 0CVE-2016-10086 – CA Service Desk Manager 12.9 / 14.1 Information Disclosure
https://notcve.org/view.php?id=CVE-2016-10086
13 Jan 2017 — RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request. Servicios web RESTful en CA Service Desk Manager 12.9 y CA Service Desk Management 14.1 podrían permitir usuarios remotos autenticados leer o modificar información de tareas aprovechando permisos incorrectos aplicados a una petición RESTful. CA Technologies support is alerting custo... • http://www.securityfocus.com/bid/95366 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 36%CPEs: 49EXPL: 0CVE-2005-3653
https://notcve.org/view.php?id=CVE-2005-3653
31 Dec 2005 — Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field. • http://marc.info/?l=full-disclosure&m=113803349715927&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •