Apache ActiveMQ RestFilter Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache ActiveMQ. Authentication is not required to exploit this vulnerability. The specific flaw exists within ActiveMQ fileserver web application. By issuing specially crafted requests, an attacke...

httpd: HTTP request smuggling attack against chunked request parser

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP...

CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafte...

USN-2721-1 subversion vulnerabilities

It was discovered that the Subversion moddavsvn module incorrectly handled REPORT requests for a resource that does not exist. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...

The vulnerability of the Apache HTTP Server web server allows attackers to trigger a service failure.

The vulnerability of the readrequestline function in the server/protocol.c component of the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted request...

The vulnerability of the Moodle learning management system allows a perpetrator to bypass the authentication process for arbitrary users.

The vulnerability of the auth/shibboleth/logout.php component of the Moodle learning management system is related to the。 Exploiting this vulnerability could allow a malicious actor, operating remotely, to bypass authentication procedures for arbitrary users using specially crafted requests...

Cisco UCS Central Software File Access Vulnerability

A vulnerability in the web framework of the Cisco UCS Central Software could allow an unauthenticated, remote attacker to download arbitrary files from a targeted device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

PT-2015-6103

Name of the Vulnerable Software and Affected Versions Web Console versions prior to 2.1.3 Ruby on Rails versions 3.x and 4.x Description The issue allows remote attackers to bypass the whitelisted ips protection mechanism via a crafted request. This is due to the improper restriction of...

CVE-2015-3183

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension...

Juniper Junos Denial of Service Vulnerability (CNVD-2015-04949)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A denial of service vulnerability exists in Juniper Junos that allows remote attackers to send specially crafted requests that can consume large amounts of CPU resources and cause denial ...

IBM Tivoli Storage Manager FastBack Mount vault Stack Buffer Overflow (CVE-2015-1896)

A stack-based buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Mount. The vulnerability is due to improper bounds checking by the FastBackMount process. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests. Successful exploitati...

SQL Buddy 'page' Parameter Directory Traversal Vulnerability

SQL Buddy is a nice lightweight ajax database management tool. A directory traversal vulnerability exists in SQL Buddy. A remote attacker can exploit this vulnerability by sending a specially crafted request with the directory traversal character '...' A remote attacker can exploit this...

Ruby on Rails activesupport Remote Denial of Service Vulnerability

Ruby on Rails is a set of open source Web application framework based on the Ruby language . activesupport is a tool function library . A security vulnerability exists in Ruby on Rails activesupport, which allows remote attackers to conduct denial-of-service attacks by submitting special requests...

The vulnerability of the NetMRI monitoring program allows a intruder to execute arbitrary code.

The vulnerability of the NetMRI network monitoring program in Anyterm lies in an authentication process error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted requests...

Novell ZENworks Configuration Management FileViewer Information Disclosure (CVE-2015-0783)

An information disclosure vulnerability exists in Novell ZENworks Configuration Management. The vulnerability is due to lack of sanitization on the filename parameter within the FileViewer class. By sending crafted requests to the target server, a remote attacker can leverage this vulnerability t...

UBUNTU-CVE-2013-1753

The gzipdecode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted HTTP request...

PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability

PHP is a general-purpose web programming language. A remote denial of service vulnerability exists in PHP 'main/rfc1867.c' that allows remote attackers to submit special requests consuming large amounts of CPU resources to conduct denial of service attacks...

Cisco Headend System Release Sensitive Information Disclosure Vulnerability

The Cisco Headend System Release is a front-end broadband digital transmission system. A security vulnerability exists in the Cisco Headend System Release that could allow a remote attacker to submit a specially crafted HTTP request to read a temporary script file or archive to obtain sensitive...

Forma LMS 1.3 - Multiple SQL Injections

Forma LMS 1.3 Multiple SQL Injections + Author: Filippo Roncari + Target: Forma LMS + Version: 1.3 and probably lower + Vendor: http://www.formalms.org + Accessibility: Remote + Severity: High + CVE: + Full Advisory: https://www.securenetwork.it/docs/advisory/SN-15-03Formalms.pdf + Info:...

libnetfilter_cthelper Memory Misreference Vulnerability

libnetfiltercthelper is a user-space library used in the Linux kernel and provides an infrastructure programming interface. A memory misreference vulnerability exists in libnetfiltercthelper, which allows an attacker to submit a special request to crash an application, resulting in a denial of...