Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability

A vulnerability in Lights-Out Management LOM functionality of the Sourcefire 3D System could allow an authenticated, remote attacker to upload arbitrary files to the baseboard management controller BMC on an affected device. The vulnerability is due to insufficient validation and sanitization of...

FreeRADIUS EAP-PWD Module Single Byte Overflow Denial of Service Vulnerability

FreeRadius is an open source based on the Radius protocol , the implementation of Radius AAA Authentication, Authorization, Accounting function of the software . FreeRadius processing EAP-PWD message there is a single-byte overflow vulnerability , allowing remote attackers to exploit the...

The vulnerability of Google Chrome browser allows a malicious intruder to gain access to local files.

The vulnerability in the Google Chrome browser’s SearchEngineTabHelper::OnPageHasOSDD function exists due to the ability to use file:URL as an XML document containing OpenSearch descriptors. As a result of exploiting this vulnerability, a remote attacker can gain access to local files through a...

CVE-2015-1886

The Remote Document Conversion Service DCS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05 allows remote attackers to cause a denial of service memory consumption via crafted requests...

Microsoft IIS Remote Code Execution Vulnerability

Microsoft IIS short for Internet Information Server, is a web server program developed by Microsoft. Microsoft IIS suffers from a remote code execution vulnerability in the HTTP protocol stack HTTP.sys, which occurs when HTTP.sys fails to properly analyze specially designed HTTP requests. The...

krb5: unauthenticated denial of service in recvauth_common() and others

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2015-02279)

McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. A security vulnerability in the McAfee Advanced Threat Defense WEB interface allows a remote, authenticated attacker to...

Fedora 22 : freeipa-4.1.4-1.fc22 / slapi-nis-0.54.2-1.fc22 (2015-4788)

CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash...

AlienVault OSSIM av-centerd Util.pm remote_task Arbitrary Command Execution - Ver2 (CVE-2014-5210)

The vulnerability is due to a failure to safely sanitize remotetask SOAP requests within Util.pm. this vulnerability can be exploit by sending crafted requests to the affected service. Successful exploitation could result in arbitrary command execution with root privileges...

Cross site request forgery (csrf)

libraries/selectlang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to...

Persistent Systems Radia Client Automation Command Execution (CVE-2015-1497)

A command execution vulnerability exists in Persistent Systems Radia Client Automation. The vulnerability is due to missing authentication while processing requests to the radexecd process. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affecte...

krb5: libgssrpc server applications leak uninitialized bytes (MITKRB5-SA-2015-001)

An information disclosure flaw was found in the way MIT Kerberos RPCSECGSS implementation libgssrpc handled certain requests. An attacker could send a specially crafted request to an application using libgssrpc to disclose a limited portion of uninitialized memory used by that application...

phpMyAdmin -- Risk of BREACH attack due to reflected parameter

The phpMyAdmin development team reports: Risk of BREACH attack due to reflected parameter. With a large number of crafted requests it was possible to infer the CSRF token by a BREACH attack. Mitigation factor: this vulnerability can only be exploited in the presence of another vulnerability that...

Sagem [email protected] 3304-V2 Directory Traversal Vulnerability

Sagem Fast is an ADSL Router using a web management interface in order to change configuration settings. The router is Sagem Fast is an ADSL Router using a web management interface in order to change configuration settings. The vulnerability may be tested with the following command-line: curl -v4...

Multiple NetGear Routers SOAP Service Authentication Bypass Vulnerabilities

The NetGear WNDR3700v4 and NetGear WNR2500 are router devices. A security vulnerability in the SOAP service of multiple NetGear router devices allows attackers to submit specially crafted HTTP SOAP requests to bypass authentication mechanisms and obtain sensitive information...

Multiple directory traversal vulnerability in pigz

pigz is a parallel implementation of gzip that uses multiple threads for compression to take advantage of multi-processor and multi-core systems. pigz suffers from multiple directory traversal vulnerabilities that could allow a remote attacker to read arbitrary files under an application using a...

Cisco Secure Access Control Server Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Secure Access Control Server ACS could allow an unauthenticated, remote attacker to conduct a web page open redirection attack against a user's browser. The vulnerability is due to insufficient input validation of a specific parameter. An attacker cou...

Cisco Secure Access Control Server Elevation of Privilege Vulnerability

Cisco Secure ACS Access Control Server is a multifunction AAA authentication server. An elevation of privilege vulnerability exists in Cisco Secure Access Control Server, which allows remote authenticated users to gain network device administrator privileges via crafted HTTP requests to create,...

InduSoft Web Studio Unauthenticated Insecure Remote Operations Code Execution - Ver2 (CVE-2011-4051)

A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. An attacker could exploit this vulnerability by sending crafted requests to the...

PT-2014-1843 · X.Org +5 · Xorg-X11-Server +14

Name of the Vulnerable Software and Affected Versions: xorg-x11-server-Xdmx versions 1.15.0 xorg-x11-server-debuginfo versions 1.15.0 xorg-x11-server-Xnest versions 1.15.0 xorg-x11-server-Xephyr versions 1.15.0 xorg-x11-server-source versions 1.15.0 xorg-x11-server-Xvfb versions 1.15.0...