Design/Logic Flaw

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773: Improper Input Validation

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

PT-2017-16776

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 4.0.0 through 4.0.24 Request Tracker RT versions 4.2.0 through 4.2.13 Request Tracker RT versions 4.4.0 through 4.4.1 Description The issue allows remote attackers to obtain sensitive information about cross-site...

Code injection

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

Cisco Ultra Services Framework AutoVNF VNFStagingView Information Disclosure Vulnerability

A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. The vulnerability is due to insufficient sanity checks...

CVE-2017-5072

Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page...

IBM Cognos Business Intelligence Server Predictive Solutions Foundation Information Disclosure Vulnerability

IBM Cognos Business Intelligence Server is a suite of business intelligence and performance management solutions from IBM in the United States. The solution reports, analyzes, monitors, and evaluates business data.Predictive Solutions Foundation formerly known as PMQ is one of the cloud-based ass...

Apache Knox User Emulation Vulnerability

Apache Knox is an application gateway for Apache Hadoop deployments to interact with the REST API and UI from the Apache Software Foundation. A user emulation vulnerability exists in Apache Knox versions 0.2.0 through 0.11.0. An attacker can exploit the vulnerability by impersonating another user...

CVE-2017-1291

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...

Cross site scripting

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...

CVE-2017-1291

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attack...

Detcon SiteWatch Gateway Authentication Vulnerability (CNVD-2017-07181)

Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. A remote attacker could exploit this vulnerability to change settings via a specially crafted URL...

CVE-2016-9099

Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the...

F5 BIG-IP APM Remote Denial of Service Vulnerability

The F5 BIG-IP is a load balancer that uses a variety of distribution algorithms to distribute network requests to available servers in a server cluster, enabling network visitors to have the best possible networking experience by managing incoming Web data traffic and increasing effective network...

PT-2017-10467

Name of the Vulnerable Software and Affected Versions Microsoft browsers affected versions not specified Description A spoofing issue exists when Microsoft browsers render SmartScreen Filter. An attacker who successfully exploits this could trick a user by redirecting them to a specially crafted...

IBM Marketing Platform Cross-Site Scripting Vulnerability (CNVD-2017-08520)

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. A cross-site scripting...

Code injection

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252...