937 matches found
PT-2019-11799 Ā· CloudbeesĀ +1 Ā· Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.196 and earlier, LTS versions 2.176.3 and earlier Description: The issue allows attackers to obtain the HTTP session cookie, despite it being marked HttpOnly, by exploiting another XSS vulnerability and accessing the /whoAm...
CVE-2019-10405: Improper Neutralization of Input During Web Page Generation
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly...
Diagnostic web page exposed Cookie HTTP header
Jenkins shows various technical information about the current user on the /whoAmI URL. The information shown includes HTTP request headers. This allowed attackers able to exploit another cross-site scripting vulnerability to obtain the Cookie header's value even if the HttpOnly flag would prevent...
Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)
Overview Multiple printers and Multifunction Printers MFPs provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. Buffer overflow in parsing HTTP cookie header CWE-119 - CVE-2019-14300 Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3,...
Coda: Use Github pack with Coda employee github account (search code of Coda's private repositories)
Summary: When you use the Github formula, the information from the Github API is returned by the endpoint https://coda.io/coda.CalcService/InvokeFormula. From what I understand, this endpoint expects a gRPC request. In the request is sent: the formula Github..CodeSearch, the version of the Github...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
Remote code execution
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginxwebconsole.php Cookie header can be used to read an etc/config/wac/wnscfgadmindetail.xm...
CVE-2019-9161
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginxwebconsole.php Cookie header can be used to read an etc/config/wac/wnscfgadmindetail.xm...
CVE-2019-9161
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginxwebconsole.php Cookie header can be used to read an etc/config/wac/wnscfgadmindetail.xm...
CVE-2019-9161
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginxwebconsole.php Cookie header can be used to read an etc/config/wac/wnscfgadmindetail.xm...
PT-2019-19404
Name of the Vulnerable Software and Affected Versions Sangfor Sundray WLAN Controller versions 3.7.4.2 and earlier Description The issue allows remote attackers to achieve full access to the system. This is due to the fact that shell metacharacters in the nginx webconsole.php Cookie header can be...
CVE-2019-9161: Improper Neutralization of Special Elements used in an OS Command
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to the system, because shell metacharacters in the nginxwebconsole.php Cookie header can be used to read an etc/config/wac/wnscfgadmindetail.xm...
PT-2019-3314
Name of the Vulnerable Software and Affected Versions MOXA EDR-810 affected versions not specified Description The issue is related to the my parse cookie if key exists function in the web server of the MOXA EDR-810 industrial router. It is caused by a lack of size checking for received data when...
PT-2019-3313
Name of the Vulnerable Software and Affected Versions MOXA EDR-810 affected versions not specified Description The issue is caused by a lack of size checking for received data when it is copied into a 0x40 byte buffer in the my parse cookie function of the web server. This can be exploited by a...
Citrix Web Application Firewall : 400 Bad Request
Getting the error "The request failed with HTTP status 400:." when opening an application hosted using a Load balancing Virtual Server when Application Firewall Profile is bound. Sample entry seen in /var/log/ns.log : Nov 22 09:49:45 172.25.224.219 11/22/2018:09:49:45 GMT qahvpxlb09 0-PPE-1 :...
Live555 Media Server Denial of Service Vulnerability
LIVE555 Media Server is an RTSP server program that provides various media file streaming services. The LIVE555 Streaming Media inventory in version 0.93 of Live555 Media Server is vulnerable to a denial of service vulnerability that can be exploited by an attacker who sends a GET request with a...
UBUNTU-CVE-2019-6256
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...
Apache Traffic Server ESI Plugin Cookie Header Information Disclosure (CVE-2018-8040)
An information disclosure vulnerability exists in Apache Traffic Server. The vulnerability is due to improper restriction of access to the Cookie HTTP header within the ESI plugin. Successful exploitation of this vulnerability could lead to disclosure of sensitive information...
The vulnerability of the console utility for downloading files with wget arises from insufficient input validation, allowing a attacker to compromise data integrity.
The vulnerability of the console utility for downloading files with wget relates to the lack of processing of the ā\r\nā sequence in line continuation strings during the grammatical analysis of HTTP headers containing Set-Cookies. Exploiting this vulnerability allows a remote attacker to insert...
CVE-2018-19114
An issue was discovered in MinDoc through v1.0.2. It allows attackers to gain privileges by uploading an image file with contents that represent an admin session, and then sending a Cookie: header with a mindocid value containing the relative pathname of this uploaded file. For example, the...