Design/Logic Flaw

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage formerly Red Hat Storage Server, allows remote authenticated users to bypass the maxmetacount constraint via multiple crafted requests which exceed the limit when combined...

CVE-2014-8177

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage formerly Red Hat Storage Server, allows remote authenticated users to bypass the maxmetacount constraint via multiple crafted requests which exceed the limit when combined...

CVE-2014-8177

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage formerly Red Hat Storage Server, allows remote authenticated users to bypass the maxmetacount constraint via multiple crafted requests which exceed the limit when combined...

CVE-2016-1388

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

ESF pfSense status_rrd_graph_img.php Command Injection

A Command Injection vulnerability has been reported in ESF pfSense. This vulnerability is due to statusrrdgraphimg.php incorrectly validating the graph HTTP parameter. A remote, authenticated attacker can exploit this vulnerability by sending crafted requests to the statusrrdgraphimg.php URI...

CVE-2016-1382

Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance WSA devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service proxy-process reload via a crafted request, aka Bug ID CSCuu02529...

rack-mini-profiler may disclose information to unauthorized users

Carefully crafted requests can expose information about strings and objects allocated during the request for unauthorised users...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the HTTP.sys component in the Windows operating system is related to improper data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system shutdown through specially crafted HTTP 2.0 requests...

PHP 'php_snmp_error()' function formatted denial of service vulnerability

PHP is an open source general-purpose computer scripting language. The PHP 'phpsnmperror' function fails to properly handle string formatting, allowing remote attackers to exploit the vulnerability by submitting a special request to crash the application...

SAP HANA Data Provisioning Agent Component Denial of Service Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. A security vulnerability exists in the DP Agent component of SAP HANA that allows remote attackers to submit special requests...

SAP NetWeaver AS JAVA Enqueue Server Component Denial of Service Vulnerability

SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications.SAP NetWeaver AS Java is an application server that runs in NetWeaver and is based on the Java programming language.Enqueue Server is one of the SAP Enqueu...

Microsoft Windows HTTP.sys Denial of Service Vulnerability

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by the U.S.-based Microsoft Corporation Microsoft for PCs and laptops, tablets, and cell phones, among other devices. A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys in...

Denial of service

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service system hang via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."...

HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become...

Symantec Endpoint Protection Manager and Client Arbitrary Code Execution Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. Symantec Endpoint Protection Manager and Client Sysplant.sys file for difficult to fully validate external data, allowing remote...

The vulnerability of the Web server for visualizing BACnet/IP network controllers, SAUTER moduWeb Vision, allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the BACnet/IP network controller visualization web server from SAUTER moduWeb Vision exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially craft...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Network Policy Server component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted requests...

IBM Tivoli Storage Manager FastBack Server Opcode 4115 Buffer Overflow (CVE-2015-4931)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking on parameters in opcode 4115 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

Cisco ASA VPN Portal Cross-Site Scripting

A cross-site scripting vulnerability has been reported in Cisco ASA VPN portal. The vulnerability is due to lack of data sanitization on URL parameters. A remote attacker can exploit this vulnerability by sending a specially crafted request to an affected server...

DEBIAN-CVE-2016-2042

phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to 1 libraries/phpseclib/Crypt/AES.php or 2 libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message...