IBM Tivoli Storage Manager FastBack Server Denial of Service (CVE-2015-8523)

A denial of service vulnerability exists in IBM Tivoli Storage Manager FastBack Server. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to port 11460/TCP...

Code injection

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

Juniper Junos space denial of service vulnerability

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in the Juniper Junos space that allows remote attackers to conduct denial-of-service attacks by submitting special requests utilizing the vulnerability...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2016-12410)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS XR Software's handling of HTTP 2.0 requests, which allows remote attackers to exploit the vulnerability by submitting a special...

CVE-2016-8740

A vulnerability was found in httpd's handling of the LimitRequestFields directive in modhttp2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash. Mitigation As a temporary workaround - HTTP...

Ceph: RGW Denial of Service by sending null or specially crafted POST object requests

A flaw was found in the way Ceph Object Gateway handles POST object requests. An authenticated attacker could launch a denial of service attack by sending null or specially crafted POST object requests...

Ceph: RGW Denial of Service by sending null or specially crafted POST object requests

A flaw was found in the way Ceph Object Gateway handles POST object requests. An authenticated attacker could launch a denial of service attack by sending null or specially crafted POST object requests...

php: out-of-bounds write in fpm_log.c

An out-of-bounds write flaw was found in the fpmlogwrite logging function of PHP's FastCGI Process Manager service. A remote attacker could repeatedly send maliciously crafted requests to force FPM to exhaust file system space, creating a denial of service and preventing further logging...

EC-CUBE Server-Side Request Forgery Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A server-side request forgery vulnerability exists in EC-CUBE version 2.12.6en-p1, which can be exploited by remote attacke...

Microsoft Windows Domain User Code Execution (MS16-110; CVE-2016-3368)

A code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way objects are handled in memory. A remote attacker with domain credentials can exploit this vulnerability by sending specially crafted requests to the target server...

PHP LibGD Stack Buffer Overflow Vulnerability

libGD is an open source library for dynamically creating images , it supports the creation of charts, graphs and thumbnails and so on. PHP LibGD suffers from a stack buffer overflow vulnerability that allows remote attackers to submit special requests and conduct denial of service attacks...

Apache Tomcat JK ISAPI Connector Buffer Overflow Vulnerability

Apache Tomcat JK ISAPI Connector is a module for Apache or IIS to connect to the backend Tomcat , which supports clustering and load balancing and so on. A buffer overflow vulnerability exists in Apache Tomcat JK ISAPI Connector, which allows remote attackers to send specially crafted URIs to the...

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

USN-3088-1 bind9 vulnerability

It was discovered that Bind incorrectly handled building responses to certain specially crafted requests. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

The vulnerability of the iOS operating system and the Safari browser allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the WebKit JavaScript component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability

A vulnerability in HTTP request forwarding with Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to link saturation. The vulnerability is due to how HTTP data ranges are downloaded from the destinatio...

SAP NetWeaver Application Server Java Directory Traversal Vulnerability

SAP NetWeaver Application Server AS Java is an application server that runs in NetWeaver and is based on the Java programming language. A directory traversal vulnerability exists in SAP NetWeaver Application Server Java. A failure of the program to properly filter user-supplied input allows a...

CVE-2016-1458

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before...

CVE-2016-1457

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute...

ReadyDesk Arbitrary File Upload Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. An arbitrary file upload vulnerability exists in ReadyDesk version 9.1. A remote attacker can exploit this vulnerability by uploading or sending a request to a specially crafted page to execute arbitrary code...