Security Bulletin: IBM MQ Light is vulnerable to a remote attack on the MQXR service (CVE-2015-4943)

Summary IBM MQ Light could allow a remote attacker to crash the MQXR service, using a sequence of connect and disconnects, which will have to be restarted. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service, using a...

f2e-server path traversal vulnerability

f2e-server is an HTTP server based on the Node.js platform . A path traversal vulnerability exists in f2e-server version 1.12.11 and earlier. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to gain access to the file system...

badjs-sourcemap-server path traversal vulnerability

badjs-sourcemap-server is a file backup server mainly for badjs-sourcemap. A path traversal vulnerability exists in badjs-sourcemap-server. An attacker can exploit this vulnerability by placing a '... /' sequence into the URL to gain access to the file system...

Serverxxx Directory Traversal Vulnerability

serverxxx is a static file server. A directory traversal vulnerability exists in serverxxx. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

caolilinode directory traversal vulnerability

caolilinode is a file server. A directory traversal vulnerability exists in caolilinode. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

wanggoujing123 Directory Traversal Vulnerability

wanggoujing123 is a web server. A directory traversal vulnerability exists in wanggoujing123. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

mockserve directory traversal vulnerability

mockserve is a file server. A directory traversal vulnerability exists in mockserve. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

dcserver Directory Traversal Vulnerability

dcserver is a static file server. A directory traversal vulnerability exists in dcserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

peiserver directory traversal vulnerability

peiserver is a static file server. A directory traversal vulnerability exists in peiserver. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

mfrserver Directory Traversal Vulnerability

mfrserver is a file server. A directory traversal vulnerability exists in mfrserver. An attacker can exploit this vulnerability to gain access to the file system by placing the '... /' sequence in a URL to gain access to the file system...

Enserver Directory Traversal Vulnerability

enserver is a web server. A directory traversal vulnerability exists in enserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

open-device directory traversal vulnerability

open-device is a software package for creating web-based device management interfaces. A directory traversal vulnerability exists in open-device. An attacker could gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

yttivy directory traversal vulnerability

yttivy is a static file server. A directory traversal vulnerability exists in yttivy. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2018-1000193

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...

gaoxuyan path traversal vulnerability

gaoxuyan is a set of server software. A directory traversal vulnerability exists in gaoxuyan. An attacker can exploit this vulnerability by placing a '... /' sequence in the url to gain access to the file system...

Amazon Linux 2 : kernel (ALAS-2018-1023)

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions delivered after a stac...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

GNU Wget Cookie Injection Vulnerability

GNU Wget is a free software package for retrieving files using the most widely used Internet protocols HTTP, HTTPS, FTP and FTPS. A cookie injection vulnerability exists in the respnew function in http.c in GNU Wget before 1.19.5. An attacker can exploit this vulnerability for cookie injection vi...

Google Android has an unspecified vulnerability (CNVD-2018-09777)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9206 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...