1382 matches found
CVE-2018-9843
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header...
CVE-2018-9843
CVE-2018-9843 affects CyberArk Password Vault Web Access: remote code execution via unsafe deserialization of a .NET object contained in the Authorization header. Affected products are CyberArk Password Vault Web Access before 9.9.5, and versions prior to 10.1 (10.x line). Exploitation is unauthe...
PT-2018-2802
Name of the Vulnerable Software and Affected Versions urllib3 versions prior to 1.23 Description The issue is related to errors in handling registration data in the urllib3 module of the Python programming language. This can allow a remote attacker to disclose protected information. Specifically,...
undertow: Client can use bogus uri in Digest authentication
It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server...
undertow: Client can use bogus uri in Digest authentication
It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server...
CVE-2018-1000007
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...
UBUNTU-CVE-2018-1000007
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is...
PT-2018-3241
Name of the Vulnerable Software and Affected Versions libcurl versions 7.1 through 7.57.0 Description The issue is related to insufficient protection of registration data in the libcurl library. This could allow a remote attacker to gain unauthorized access to protected information. When libcurl ...
libcsoap nanohttp Denial of Service Vulnerability
libcsoap is a SOAP parsing and encapsulation code written in C. It contains simple HTTP server and client code. nanohttp is one of the HTTP servers. A denial of service vulnerability exists in nanohttp in libcsoap. A remote attacker can exploit this vulnerability to cause a denial of service null...
Null pointer dereference
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
nanohttp in libcsoap allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Authorization header...
CVE-2015-2297
CVE-2015-2297 affects the libcsoap project’s nanohttp component. A vulnerability in nanohttp allows a remote attacker to trigger a denial of service via a specially crafted Authorization header , causing a NULL pointer dereference and application crash. Reported details across sources consistentl...
BSA-2017-377
Security Advisory ID : BSA-2017-377 Component : Apache HTTPD Revision : 3.0: Final In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by...
Intel Active Management Technology - System Privileges
!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...
Joyent Node.js npm Information Disclosure Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. npm is one of the package management and distribution tools . An information disclosure vulnerability exists in the CLI of npm versions prior to 2.15.1 and 3.x...
Swift3 Replay Attack Vulnerability
OpenStack is a cloud platform management project.Swift is one of the storage projects for storing permanent static data.Swift3 is a middleware that provides access to OpenStack Swift through the Amazon S3 API. Swift3 has a security vulnerability that allows a remote attacker to perform a replay...