CVE-2016-5822

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

Code injection

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

CVE-2016-5822

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

CVE-2016-5822

Huawei OceanStor 5800 is affected by CVE-2016-5822 where an attacker can cause a denial of service by sending a large number of crafted HTTP packets. Affected version: OceanStor 5800 prior to V300R002C10SPC100. Impact: HTTP service CPU exhaustion leading to DoS (per CVSS notes: AV:N/AC:L/PR:N/UI:...

CVE-2016-5822

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

Integer Overflow Vulnerability in Some Huawei Switches

Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. An integer overflow vulnerability exists in some of Huawei's switches. Due to the lack of checksums on specific fields in IPFPM messages, an unauthenticated remote attacke...

Huawei OceanStor 5800 Denial of Service Vulnerability

Huawei OceanStor 5800 is a storage product from Huawei China for mid- to high-end storage applications. A denial of service vulnerability exists in Huawei OceanStor 5800 V3 V300R002C10 version. An attacker can exploit this vulnerability to cause a denial of service by sending a large number of...

Security Advisory - Integer Overflow Vulnerability in the OceanStor 5800

The OceanStor 5800 V3 Storage Systems are mid-range storage products newly developed by Huawei. The OceanStor 5800 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System NFS packets, causing an anomaly in specific disk arrays. Vulnerability...

Security Advisory - DoS Vulnerability in the OceanStor 5800

The OceanStor 5800 Storage Systems are mid-range storage products newly developed by Huawei. Huawei Oceanstor 5800 has a DoS vulnerability. An attacker may send massive abnormal HTTP packets to the device. As a result, the HTTP service generates a high CPU usage, and the device denies services...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-1447)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5800

CVE-2015-5800 affects WebKit used in Apple iOS before 9 and iTunes before 12.3, enabling remote code execution or memory corruption via a crafted web site. Connected sources (e.g., OpenVAS and Mageia/MGI advisories) indicate WebKit/WebKit2 updates were released to fix related vulnerabilities, inc...

Amazon Linux: Security Advisory (ALAS-2013-235)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5800

The CVE-2014-5800 entry concerns the Android app smart.nhibzbanking (nh.smart.nhibzbanking) version 2.1, which does not verify X.509 certificates from SSL servers. The root cause is the lack of proper TLS certificate validation, enabling MITM attackers to spoof servers and potentially exfiltrate ...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

RedHat Update for java-1.7.0-openjdk RHSA-2013:1447-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

java security update

CentOS Errata and Security Advisory CESA-2013:1447 Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

CVE-2013-5800

CVE-2013-5800 corresponds to an Oracle Java SE vulnerability (7u40 and earlier) exploitable via JGSS vectors. In the connected IBM advisories, this CVE is included in multiple IBM Java SDK/JRE bulletins affecting IBM WebSphere Real Time (3.x) and IBM SDK/JAVA product lines. The IBM WebSphere Real...

CVE-2012-5800

The CVE-2012-5800 entry concerns the PrestaShop eBay module failing to verify that the server hostname matches a domain in the certificate’s CN or subjectAltName. This weakens TLS authentication and allows man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. The ...