20527 matches found
CVE-2011-4885
CVE-2011-4885 affects PHP before 5.3.9, where the hash used for form parameters can collide predictably, enabling remote CPU-exhaustion DoS via crafted requests. Connected advisories confirm its practical impact and show mitigations/patches across distributions: CentOS/RHEL advisories (e.g., RHSA...
CVE-2011-4838
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table...
CVE-2011-5035
Removed by vendor...
CVE-2011-5035
CVE-2011-5035 affects Oracle Glassfish versions 2.1.1, 3.0.1, and 3.1.1 (used in several server products). The issue arises from computing hash values for form parameters without preventing predictable hash collisions, enabling a remote attacker to cause CPU-based denial of service by sending cra...
CVE-2011-4815
CVE-2011-4815 affects Ruby (CRuby) and is caused by a hash function implementation that allows predictable hash collisions, enabling context-dependent attackers to cause a denial of service through CPU consumption when Ruby hashes are fed crafted input. Connected advisories confirm multiple vendo...
CVE-2011-4461
CVE-2011-4461 affects Jetty (e.g., Jetty 8.1.0.RC2 and earlier). The vulnerability arises from hash table collisions in Jetty’s handling of form parameters, enabling a remote attacker to cause CPU exhaustion/DoS by sending crafted parameters. IBM and related advisories consistently describe the D...
Mandriva Update for icu MDVSA-2011:194 (icu)
Check for the Version of icu OpenVAS Vulnerability Test Mandriva Update for icu MDVSA-2011:194 icu Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Microsoft .Net Form Authentication Insecure Redirect (MS11-100; CVE-2011-3415)
A spoofing vulnerability has been reported in Microsoft .NET Framework. The vulnerability is due to an error in the way .NET Framework verifies return URLs during the forms authentication process. A remote attacker may exploit this vulnerability by enticing users to open a malicious link...
Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)
Check for the Version of ipmitool OpenVAS Vulnerability Test Mandriva Update for ipmitool MDVSA-2011:196 ipmitool Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)
This host is missing a critical security update according to Microsoft Bulletin MS11-100. OpenVAS Vulnerability Test $Id: secpodms11-100.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in .NET Framework Could Allow Elevation of Privilege 2638420 Authors: Sooraj KS Copyright: Copyright c 2011...
CVE-2011-5204
creationtimestamp| type| source ---|---|--- 2011-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18293...
Mandriva Update for krb5-appl MDVSA-2011:195 (krb5-appl)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Microsoft .NET Framework 用户验证权限提升漏洞(CVE-2011-3416)
BUGTRAQ ID: 51201 CVE ID: CVE-2011-3416 ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET Framework在用户验证的实现上存在权限提升漏洞，攻击者可利用此漏洞非法访问另一个用户账户，以其权限执行任意命令。要利用此漏洞，非法攻击者需要在ASP.NET应用上注册一个帐户并了解目标用户的现有帐户名，然后使用之前注册的账目名访问该帐户来构造特制的Web请求。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x...
Mandriva Update for icu MDVSA-2011:194 (icu)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-5203
creationtimestamp| type| source ---|---|--- 2011-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18293...
CVE-2011-5200
creationtimestamp| type| source ---|---|--- 2011-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18292...
Ruby哈希冲突拒绝服务漏洞
BUGTRAQ ID: 51198 CVE ID: CVE-2011-4815 Ruby一种为简单快捷对象导向编程（面向对象程序设计）而创的脚本语言。 Ruby处理在哈希表单张贴和更新哈希表单时，哈希生成函数中存在错误，通过在HTTP POST请求中发送特制的表单，攻击者可利用此漏洞造成哈希冲突，导致较高的CPU消耗。 0 Ruby 1.x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/...
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)
This host is missing a critical security update according to Microsoft Bulletin MS11-100. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
