Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

CVE-2015-7419

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

Code injection

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

CVE-2015-7419

IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service memory consumption via crafted requests...

IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Buffer Overflow (CVE-2015-1929)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking while processing remote requests within the FXCLIOraBRExecCommand function. A remote unauthenticated attacker could exploit this vulnerability by sendin...

Libxslt 'libxslt/preproc.c' Remote Denial of Service Vulnerability

Libxslt is an XSLT C library developed for the GNOME project. A security vulnerability in Libxslt 'libxslt/preproc.c' allows remote attackers to submit special requests for denial of service attacks...

ISUCON5 qualifier OS Command Injection Vulnerability

ISUCON5 qualifier is a suite of qualifier portal applications. ISUCON5 qualifier's eventapp/lib/gcloud.rb fails to make the correct popen call, allowing remote attackers to submit HTTP requests containing special metacharacters to execute arbitrary commands...

Magento MAGMI plugin directory traversal vulnerability

Magento is a professional open source PHP e-commerce system, MAGMI is one of the plug-ins used to import a large number of product catalogs into the Magento system. A directory traversal vulnerability in the Magento MAGMI plugin allows remote attackers to send requests containing special director...

IBM Lotus Domino Web Server iNotes Buffer Overflow (CVE-2003-0178)

A buffer overflow vulnerability exists in IBM Lotus Domino iNotes Web Server. The vulnerability is due to incorrect handling of client-supplied request parameters. A remote attacker can exploit this vulnerability by sending crafted requests to affected servers...

CVE-2015-7705

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests...

UBUNTU-CVE-2015-7705

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests...

Microsoft Office Web Apps Cross-Site Scripting Vulnerability

Microsoft Office Web Apps Server is an Office Server product from the U.S. company Microsoft Microsoft that provides browser-based file viewing and editing capabilities for Office documents. A cross-site scripting vulnerability exists in Microsoft Office Web Apps Server. An attacker could exploit...

The vulnerability of the iOS operating system allows attackers to carry out attacks related to the injection of cookie files.

The vulnerability of the CFNetwork Proxies component in the iOS operating system exists due to the lack of measures taken to neutralize these special elements. Exploiting this vulnerability allows a malicious actor to perform attacks related to the injection of cookies through a specially crafted...

The vulnerability of the SAP Afaria mobile device management program allows a hacker to inject arbitrary JavaScript code.

The vulnerability of the SAP Afaria mobile device management program allows a malicious actor to inject arbitrary JavaScript code by sending a specially crafted request to the Xcomms network service...

The vulnerability of the Microsoft Exchange Server system’s automation mechanism allows a perpetrator to gain access to protected information.

The vulnerability of the Outlook Web Access component of the Microsoft Exchange Server automation system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a...

Denial of service

Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability."...

Microsoft .NET Framework Privilege Elevation Vulnerabilities (3089662)

This host is missing an important security update according to Microsoft Bulletin MS15-101. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2526

Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability."...

The vulnerability of the SAP Afaria mobile device management program allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Device Inspector page of the SAP Afaria mobile device management software exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code using a specially crafted request...

MS15-101: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the Microsoft .NET Framework : - An elevation of privilege vulnerability exists due to improper validation of the number of objects in memory before they are copied into an array. A...