CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-14493

A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...

UBUNTU-CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-1577

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 132117...

Nodejs V8 Debugger Remote Code Execution

A remote code execution vulnerability is exist in Node.js v8 debugger. A remote attacker can exploit this weakness to execute arbitrary code in the Nodejs server via a crafted request...

Schneider Electric ClearSCADA Memory Allocation Vulnerability

Schneider Electric ClearSCADA is an open software platform that allows remote management of critical architectures. A memory allocation vulnerability exists in Schneider Electric ClearSCADA that could be exploited by an attacker to submit a special request for a denial of service attack...

Cisco Wide Area Application Services Denial of Service Vulnerability

Cisco Wide Area Application Services WAAS is the United States Cisco Cisco company's set of WAN link acceleration software. The software is mainly used for small bandwidth and high latency link environment. A denial of service vulnerability exists in the HTTP web interface in Cisco WAAS, which...

Tor 'rend_service_intro_established' function sensitive information disclosure vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A security vulnerability in the 'rendserviceintroestablished' function in the or/rendservice.c file in Tor allows remote attackers to exploit the vulnerability by submitting a special...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-14581

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

CVE-2017-12615

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it containe...

Design/Logic Flaw

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request...

Linux kernel XFS_IS_REALTIME_INODE Macro Denial of Service Vulnerability

Linux kernel is an open source operating system. A security vulnerability in the XFSISREALTIMEINODE macro in the Linux kernel fs/xfs/xfslinux.h file allows local attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

VMware ESXi Out-of-Bounds Write Code Execution Vulnerability

VMware ESXi is a server virtualization platform that can be installed directly on physical servers. A security vulnerability exists in VMware ESXi that could be exploited by a remote attacker to submit a special request to write and execute arbitrary code across boundaries...

Linux kernel 'iscsi_if_rx' function denial of service vulnerability

Linux kernel is an open source operating system. A security vulnerability in the 'iscsiifrx' function in the Linux kernel drivers/scsi/scsitransportiscsi.c file allows a local attacker to exploit the vulnerability by submitting a special request for a denial of service attack...

Hewlett Packard Enterprise Application Performance Management System Health Authentication Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the Syst...

Apache Struts REST Plugin Denial of Service Vulnerability

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of Java Web applications for the creation of enterprise-class open source MVC framework . Apache Struts 2 is the next generation of Apache Struts products , is bas...

Apache Struts REST Plugin XStream Deserialization Remote Code Execution (CVE-2017-9805)

A remote code execution vulnerability exists in Apache Struts. This vulnerability is due to the an insecure deserialization. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation will allow an attacker to execute arbitrary co...

tomcat: Security constrained bypass in error page mechanism

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...