DEBIAN-CVE-2016-5396

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

CVE-2016-5396

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

CVE-2016-5396

Apache Traffic Server (ATS) versions 6.0.0–6.2.0 are affected by an HPACK Bomb Attack. The CVE notes a network-accessible vulnerability with a high impact on availability (CVSS v3 base score 7.5). The related documents consistently describe HPACK Bomb as the issue; no concrete remediation, patch ...

CVE-2016-5396

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

CVE-2016-5396

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

CVE-2016-5396: Undefined Security Weakness

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack...

GitLab: Cookie bomb

It is possible to create a that called cookie bomb in Gitlab Pages. This is especially a problem if the site creating the cookie bomb uses a shared pages domain. In that case no subdomain of that domain would be accessible for that user anymore until they clear their cookies. That does not only...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

Design/Logic Flaw

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

CVE-2016-8275

CVE-2016-8275 affects Huawei AnyOffice, specifically the AnyOffice EMM component on the V200R006C00 platform. The vulnerability allows an authenticated remote attacker to cause a denial of service by uploading an XML bomb, enabling partial availability impact as described in the NVD entry. The is...

CVE-2016-8275: Improper Input Validation

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb...

Huawei Flybox B660 - Cross-Site Request Forgery (2)

Document Title: =============== Huawei Flybox B660 - POST SMS CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2026 Release Date: ============= 2017-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 2026...

Huawei AnyOffice XML Bomb Vulnerability

AnyOffice provides Enterprise Mobile Management EMM function to manage the whole life cycle of mobile devices. An XML Bomb vulnerability exists in AnyOffice EMM, which can be exploited by an authenticated network attacker to cause a denial of service by uploading an XML bomb...

CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

Design/Logic Flaw

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

DEBIAN-CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...