Apache Tomcat DoS and Information Disclosure Vulnerabilities (Apr 2017) - Windows

Apache Tomcat is prone to denial of service DoS and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2017-5650

CVE-2017-5650 affects Apache Tomcat 9.0.0.M1–M18 and 8.5.0–8.5.12. The HTTP/2 GOAWAY handling could fail to close streams waiting for a WINDOW_UPDATE, causing those streams to consume threads and enabling a malicious client to exhaust processing threads (DoS). There is no exploitation status in t...

CVE-2017-5650

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data. These waiting streams each...

Apache Software Foundation Releases Security Updates

The Apache Foundation has released security updates to address vulnerabilities in Apache Tomcat. Exploitation of one of these vulnerabilities may cause a remote attacker to obtain sensitive information. Users and administrators are encouraged to review Apache.org CVE-2017-5648, CVE-2017-5650, and...

Fixed in Apache Tomcat 9.0.0.M19

Important: Information Disclosure CVE-2017-5651 The refactoring of the HTTP connectors for 8.5.x onwards, introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could resu...

CVE-2016-5650

CVE-2016-5650 affects ZModo ZP-NE14-S and ZP-IBH-13W cameras/DVRs. The vulnerability arises because these devices do not enforce a WPA2 configuration setting, enabling a remote attacker to induce association with an arbitrary access point by presenting a recognized SSID value. Public sources conf...

Zmodo ZP-NE14-S DVR and ZP-IBH-13W cameras contain hard-coded credentials

Overview The Zmodo ZP-NE14-S DVR and ZP-IBH-13W cameras contain hard-coded credentials and run telnet by default. Description CWE-798: Use of Hard-coded Credentials - CVE-2016-5081According to the reporter, the Zmodo ZP-NE14-S DVR and ZP-IBH-13W cameras contain undocumented credentials for...

CVE-2015-5650

CVE-2015-5650 affects AjaXplorer 2.0 and is a directory traversal vulnerability (CWE-22) that allows a remote attacker to read arbitrary server files via unspecified vectors. The vulnerability is confirmed in version 2.0; Affected product is AjaXplorer, a web-based remote file manager. Root cause...

CVE-2014-5650

The CVE-2014-5650 entry concerns the Android app Traffic Jam Free (aka com.jiuzhangtech.rushhour) 1.7.7, which does not verify X.509 certificates from SSL servers. This omission enables man-in-the-middle attackers to spoof servers and harvest sensitive data via a crafted certificate. The connecte...

America Online ICQ 5.1 ActiveX Control Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20930/info The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. An attacker could exploit this issue simply by sending a message to a victim ICQ user. Successful exploits could allow t...

CVE-2012-5650

Cross-site scripting XSS vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite...

CVE-2013-5650

CVE-2013-5650 details (connected docs): The vulnerability affects Junos Pulse Secure Access Service (IVE) and Pulse Access Control Service (UAC) when a hardware SSL acceleration card is enabled. A crafted packet can trigger a denial of service resulting in a device hang. Public materials confirm ...

Apache CouchDB < 1.0.4 / 1.1.2 / 1.2.1 Multiple Vulnerabilities

Binary data 800632.prm...

Fedora 18 : couchdb-1.2.1-2.fc18 (2013-1375)

Ver. 1.2.1 security bugfix release - Unbundle snappy see rhbz 871149 - Add isa to the Requires Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora Update for couchdb FEDORA-2013-1375

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2006-5650

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16554 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/aolicqdownloadagent.rb 2025-02-06 03:13:38+00:00...

America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit)

$Id: aolicqdownloadagent.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-5650

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...

CVE-2008-5650

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...

CVE-2008-5650

CVE-2008-5650 is a reported SQL injection vulnerability in the login directory of AlstraSoft Web Host Directory, exploitable via the pwd parameter to execute arbitrary SQL commands remotely. The CVSS v2 base score is 7.5 (HIGH), with network attack vector, low complexity, and no authentication re...